x2go-announcements June 2014

x2go-announcements@lists.x2go.org

2 participants
5 discussions

NX-redistributed (3.5.0.27) released
by Mike Gabriel 30 Jun '14

30 Jun '14

Dear all, unfortunately I had to make two consecutive follow-up releases of the X2Go component ,,nx-libs''. Fixes of these versions of ,,nx-libs'' are: o Make sure all patches end-up in the release tarball. o Split up patch 210 to allow generation of the nx-libs-lite tarball. X2Go Component: nx-libs Version: 3.5.0.27 Status: RELEASE Date: Mon, 30 Jun 2014 14:53:27 +0200 Changes: nx-libs (3.5.0.27) RELEASED; urgency=medium . * Split up patch 210 (for correct creation nx-libs, nx-libs-lite tarballs): + 210_nxagent_save_session_state.full.patch + 210_nxcomp_save_session_state.full+lite.patch . nx-libs (3.5.0.26) RELEASED; urgency=medium . * Fix patch names: + 212_nxcomp_build-on-Android.patch -> 212_nxcomp_build-on-Android.full+lite.patch + 302_nx-X11_xkbbasedir-detection.patch -> 302_nx-X11_xkbbasedir-detection.full.patch Regards, Mike Gabriel -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

NX-redistributed (3.5.0.25) released
by Mike Gabriel 30 Jun '14

30 Jun '14

Dear all, the X2Go project is proud to announce a new release of the X2Go component ,,nx-libs''. New gains of this version of ,,nx-libs'' are: o Add kernel socket namespace support. Fixes failing nxproxy/nxagent execution on systems where pam_namespace.so is in use. o Fix xkeyboard-2.6 incompatibility issues. (Maybe not all of them, so please report back...). o Fix PPC64 support. (Thanks to Mihai Moldovan for digging into this!!!) o Allow building nxproxy/nxcomp on Android. (Thanks to Nito Martínez from the QVD project for sending in this patch). o New option: -state <statefile>. More accurately detect the current session state via an external status file. This is part of the bugfix for X2Go BTS issue #302. o Allow clipboard={none,client,server,both} as NX option. o Plus some minor issues (see changelog below...) X2Go Component: nx-libs Version: 3.5.0.25 Status: RELEASE Date: Mon, 30 Jun 2014 14:05:46 +0200 Fixes these bug report(s): 40 339 490 504 505 515 516 Changes: nx-libs (3.5.0.25) RELEASED; urgency=low . [ Mihai Moldovan ] * Add 029_nxcomp_ppc64.full+lite.patch. Fix sockaddr handling on Big Endian systems (like PPC64). (Fixes: #515). * Add 057_nx-X11_sanitize-eventmasks.full.patch. Fix failures in session windows coming up on Big Endian systems like PPC64. (Fixes: #516). * Improve 105_nxagent_export-remote-keyboard-config.full.patch. Don't print out nonsensical information, if there really was no error when creating the keyboard file or the other way around. Also add the reason when failing to create the keyboard file. Only print an error message if SessionPath *really* is not defined. * Improve 028_nx-X11_abstract-kernel-sockets.full.patch. Make it more Big Endian robust by assigning correct types for socklen_t objects. * Add 990_fix-DEBUG-and-TEST-builds.full.patch. Fix debug builds (e.g. when globally setting -DDEBUG and -DTEST at build time). . [ Nito Martínez ] * Add 212_nxcomp_build-on-Android.patch. Fix FTBFS of nxproxy/nxcomp when build against the Android system. (Fixes: #339). . [ Oleksandr Shneyder ] * Add 210_nxagent_nxcomp_save_session_state.full+lite.patch. Save session state in path specified by "state" option in agent options file. If option is omitted, session state will not be saved. Session states are: STARTING, RUNNING, SUSPENDING, SUSPENDED, RESUMING, TERMINATING, TERMINATED. * Add 211_nxcomp_set_default_options.full+lite.patch. Set default arguments for options 'link' and 'pack' to avoid session damage by resuming with incorrect options file. . [ Mike Gabriel ] * Add 606_nx-X11_build-on-aarch64.full.patch. Build on aarch64 architectures. (Fixes: #490). * Add 027_nxcomp_abstract-X11-socket.full+lite.patch. In proxy mode "server" let NX proxy attempt connecting to the abstract X11 socket first, and only fallback to the file system socket, if the abstract socket is not available. (Fixes: #505). * Add 028_nx-X11_abstract-kernel-sockets.full.patch. Provide abstract local socket support for Linux based systems. This patch pulls in abstract socket relevant code from xtrans 1.2.7. (Fixes: #504). * Add 302_nx-X11_xkbbasedir-detection.patch. For detecting XkbBaseDir test for xkb/rules/base instead of testing for deprecated file xkb/keymap.dir. (Fixes: #40). * Add 206_nxagent_clipboard-as-nxoption.full.patch. Make the clipboard option configurable in nxagent via NX options as addition to the command line parameter -clipboard. Note that the command line parameter overrides the clipboard NX option. Possible values are both or 1, client, server, none or 0. . * Update patches, to make them apply cleanly after above changes: + 220_nxproxy-bind-loopback-only.full+lite.patch + 016_nx-X11_install-location.debian.patch + 056_nx-X11-Werror-format-security.full.patch + 108_nxagent_wine-close-delay.full.patch + 300_nxagent_set-wm-class.full.patch + 320_nxagent_configurable-keystrokes.full.patch . * Rename patches to match our naming scheme: + 008_nxcomp_sa-restorer.full+lite.patch + 009_nxagent_add-man-page.full.patch + 009_nxproxy_add-man-page.full+lite.patch + 056_nx-X11_Werror-format-security.full.patch + 209_x2goagent_add-man-page.full.patch + 220_nxproxy_bind-loopback-only.full+lite.patch Regards, Mike Gabriel -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Important information: Wrong version of X2Go Server in Baikal LTS Debian archive
by Mike Gabriel 19 Jun '14

19 Jun '14

Dear all, == Summary == we got informed by John McMonagle [1] about wrong package versions in the Debian archive of X2Go. Unfortunately, I only grasped the severity of that bug report a couple of days back. In February 2014, a development snapshot of x2goserver* packages found their way into the Debian-based package archive of X2Go Baikal LTS [2]. This is of course a severe issue and after cross-checking last Monday, I reverted those uploads and provided the correct package versions (X2Go Server 4.0.0.11). No other area of the package archive was affected, only the Baikal LTS packages of X2Go Server for Debian. == How to downgrade == Follow these steps for downgrading the development snapshot (4.1.0.0-preview) to the current Baikal LTS release of X2Go Server (4.0.0.11). Open a terminal and run these commands... $ apt-get update $ apt-cache show x2goserver ### you should see two version of package x2goserver ### x2goserver 4.1.0.0-0x2go1~<something> (which is the currently installed version) ### and ### x2goserver 4.0.0.11-0x2go1+git20140615.736+<debversion>.baikal.1 $ cp /etc/x2go/x2goserver.conf /etc/x2go/x2goserver.conf.bak $ apt-get remove --purge x2goserver-common libx2go-server-perl libx2go-log-perl $ apt-get install x2goserver x2goserver-xsession x2goserver-printing x2goserver-fmbindings $ cp /etc/x2go/x2goserver.conf.bak /etc/x2go/x2goserver.conf ### You may want to view changes between the two config files... $ diff -ur /etc/x2go/x2goserver.conf.bak /etc/x2go/x2goserver.conf # and manually edit the one now installed as x2goserver.conf I am very sorry that this happened, it should not have!!! If you need further help, please contact either me or any other of the devs via our mailing list x2go-user [3] or via IRC [4]. light+love, Mike Gabriel [1] http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=429 [2] deb http://packages.x2go.org/debian {squeeze,wheezy,jessie,sid} baikal [3] http://lists.x2go.org/listinfo/x2go-user [4] #x2go at irc.freenode.net (my nick there is "sunweaver") -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

X2Go Client for Windows (4.0.2.0+build4) released
by Mike DePaulo 08 Jun '14

08 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear all, this is to announce a new Windows-specific security update release of the X2Go component ,,x2goclient''. The change in this release of ,,x2goclient'' is: o Cygwin OpenSSL was updated from 1.0.1g-1 to 1.0.1h-1. This fixes the 6 security vulnerabilities in the OpenSSL Security Advisory [05 Jun 2014]: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298 & CVE-2014-3470 Note that the previous announcement on 4.0.2.0+build3 was about Win32 OpenSSL being updated. Now, Cygwin OpenSSL has also been updated. With 4.0.2.0+build4, all versions of OpenSSL bundled with X2Go Client for Windows have been updated. All Windows users of 4.0.2.0+build3 and earlier are strongly encouraged to update to 4.0.2.0+build4. This includes users of the "misc" fonts and "full" fonts builds. For more info on this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.2.0 Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlOTwikACgkQIFy22CVQsiuKiAEA7qhmO3FCf9aOVGySXl4FU84J lxqgFU/MQloCvxLMJ4kA/2KRNi7JPjps6WSoYzQEPHRYVRhJNz3tw0pSsMA21tnM =mVcH -----END PGP SIGNATURE-----

1 0

X2Go Client for Windows (4.0.2.0+build3) released
by Mike DePaulo 08 Jun '14

08 Jun '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear all, this is to announce a new Windows-specific security update release of the X2Go component ,,x2goclient''. The change in this release of ,,x2goclient'' is: o Win32 OpenSSL was updated from 1.0.1g to 1.0.1h. This fixes the 6 security vulnerabilities in the OpenSSL Security Advisory [05 Jun 2014]: CVE-2014-0224, CVE-2014-0221, CVE-2014-0195, CVE-2014-0198, CVE-2010-5298 & CVE-2014-3470 An announcement will be sent out shortly about 4.0.2.0+build4, which also fixes these 6 vulnerability in Cygwin OpenSSL. 4.0.2.0+build4 is already available to download. All Windows users of 4.0.2.0+build2 and earlier are strongly encouraged to update to 4.0.2.0+build4 (instead of 4.0.2.0+build3.) This includes users of the "misc" fonts and "full" fonts builds. For more info on this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.2.0 Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iF4EAREIAAYFAlOTv+sACgkQIFy22CVQsivfUgEAnHEalQ2QE/qIidZczz9raX0l DVYiqhxyj3Ee6yzsZywA/15xqqGM2EOF6aGm+Vgpn3l3tlULrMl8mXt9FPEC+K6V =SBQX -----END PGP SIGNATURE-----

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-announcements June 2014