x2go-announcements

x2go-announcements@lists.x2go.org

1 participants
401 discussions

NX redistributed (3.5.0.31) released
by Mihai Moldovan 17 Mar '15

17 Mar '15

Dear all This is yet another release to fix the upgrade on RPM-based systems with packages from ,,nx-libs''. The changes listed below address minor problems mostly on OS X and fix the dependencies of generated RPM packages. If you do not build from source and are not using RPM packages, you may skip this release at your option. We are hopeful that this will be the last hotfix in the library package versioning/renaming aftermath. X2Go Component: nx-libs Version: 2:3.5.0.31 Status: RELEASE Date: Tue, 17 Mar 2015 18:48:06 +0100 Changes: nx-libs (3.5.0.31) RELEASED; urgency=low . [ Clemens Lang ] * Use path discovery for finding makedepend. Remove old cruft. Adds: - 0070_nxcomp_use-MAKEDEPEND-in-path.full+lite.patch - 0071_nxcompext_use-MAKEDEPEND-in-path.full+lite.patch - 0072_nxcompshad_use-MAKEDEPEND-in-path.full+lite.patch - 0073_nxproxy_use-MAKEDEPEND-in-path.full+lite.patch * Fix dynamic library linking on OS X. Use -dynamiclib instead of -bundle. Adds: - 0074_nxcomp_use-dynamiclib-flag-on-OS-X.full+lite.patch - 0075_nxcompshad_use-dynamiclib-flag-on-OS-X.full+lite.patch * Use the correct library naming scheme on OS X. It differs from other UNIX-based systems. Adds: - 0410_nxcomp_use-correct-library-naming-scheme-on-OS-X.full+lite.patch - 0610_nxcompext_use-correct-library-naming-scheme-on-OS-X.full+lite.patch - 0611_nxcompshad_use-correct-library-naming-scheme-on-OS-X.full+lite.patch . [ Mihai Moldovan ] * nx{comp{,ext,shad},proxy}: try really hard to find makedepend. Do not fail if it is not available. * Rename: - 0070_nxcomp_use-MAKEDEPEND-in-path.full+lite.patch => 0410_nxcomp_use-MAKEDEPEND-in-path.full+lite.patch - 0071_nxcompext_use-MAKEDEPEND-in-path.full+lite.patch => 0610_nxcompext_use-MAKEDEPEND-in-path.full+lite.patch - 0072_nxcompshad_use-MAKEDEPEND-in-path.full+lite.patch => 0611_nxcompshad_use-MAKEDEPEND-in-path.full+lite.patch - 0073_nxproxy_use-MAKEDEPEND-in-path.full+lite.patch => 0612_nxproxy_use-MAKEDEPEND-in-path.full+lite.patch - 0074_nxcomp_use-dynamiclib-flag-on-OS-X.full+lite.patch => 0613_nxcomp_use-dynamiclib-flag-on-OS-X.full+lite.patch - 0075_nxcompshad_use-dynamiclib-flag-on-OS-X.full+lite.patch => 0614_nxcompshad_use-dynamiclib-flag-on-OS-X.full+lite.patch - 0610_nxcompext_use-correct-library-naming-scheme-on-OS-X.full+lite.patch => 0620_nxcompext_use-correct-library-naming-scheme-on-OS-X.full+lite.patch - 0611_nxcompshad_use-correct-library-naming-scheme-on-OS-X.full+lite.patch => 0621_nxcompshad_use-correct-library-naming-scheme-on-OS-X.full+lite.patch * nx-libs.spec: - Versioned libXcomp* should obsolete unversioned libXcomp*, not libNX_Xcomp*. - Add overlooked Obsolete: statement to libNX_Xfixes3. * Mid-release fixup: - Rename *nxcomp{ext,shad}*.full+lite* to *nxcomp{ext,shad}*.full. Regards, Mihai Moldovan

1 0

NX redsitributed (3.5.0.30) released
by Mike Gabriel 14 Mar '15

14 Mar '15

Dear all, we just figured out an upgrade path problem with the latest ,,nx-libs'' release. The issue occurred with our Launchpad builds for Ubuntu. To get this issue fixed immediately, I decided for the easiest approach: bump (i.e. increment) the version of nx-libs to 3.5.0.30. This should make x2goagent and associated libraries installable again on Ubuntu. X2Go Component: nx-libs Version: 2:3.5.0.30 Status: RELEASE Date: Sat, 14 Mar 2015 14:37:58 +0100 Changes: nx-libs (3.5.0.30) RELEASED; urgency=low . [ Mike Gabriel ] * Version bump release of nx-libs to assure a working upgrade path on Ubuntu (where the build daemons strip-off the "-0x2goX" revision suffix from the package version. . [ X2Go Release Manager ] * debian/roll-tarball.sh: + Only clean up nx-X11 source tree if it is there (i.e., skip that for the nx-libs-lite tarball generation). Regards, Mike Gabriel -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

NX redistributed (3.5.0.29) released
by Mihai Moldovan 13 Mar '15

13 Mar '15

Dear all The X2Go project is proud to announce a new release of the X2Go component ,,nx-libs''. New gains of this version of ,,nx-libs'' are: o further reduction of code size by Mike Gabriel (93MB -> 41MB uncompressed, 16MB -> 6.5MB compressed) o ~/.x2go/config/keystrokes.cfg, /etc/x2go/keystrokes.cfg and /etc/nxagent/keystrokes.cfg are now respected thanks to Horst Schirmeier o security fixes for CVE-2011-2895, CVE-2011-4028, CVE-2013-4396, CVE-2013-6462, CVE-2014-0209, CVE-2014-0210, CVE-2014-0211, CVE-2014-8092, CVE-2014-8097, CVE-2014-8095, CVE-2014-8096, CVE-2014-8099, CVE-2014-8100, CVE-2014-8102, CVE-2014-8101, CVE-2014-8093, CVE-2014-8098, CVE-2015-0255 by Michael DePaulo o Debian/Ubuntu packaging rework; libnx-x11 now split up into multiple packages; new -dev packages; setting LD_LIBRARY_PATH now unnecessary; new multi-arch support; new hardened support o libraries now versioned on RPM-based distros; miscellaneous RPM fixes o new patch naming scheme based on four digits o other (build) bug fixes We thank Horst Schirmeier for improving our software. X2Go Component: nx-libs Version: 2:3.5.0.29 Status: RELEASE Date: Fri, 13 Mar 2015 15:50:00 +0100 Fixes these bug report(s): 741 744 Changes: nx-libs (3.5.0.29) RELEASED; urgency=medium . [ Mike Gabriel ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix patch header referring to keystrokes.cfg (plural), not keystroke.cfg. * Allow sysadmins to manipulate nxagent's / x2goagent's rgb file by placing it into /etc/nxagent or /etc/x2go. * Provide support for separate .keyboard files for nxagent/x2goagent. * Modify 0101_nxagent_set-rgb-path.full.patch. Allow configurable rgb files. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Let rgb file shipped with x2goagent supersede rgb file shipped with nxagent. FIXME: a better approach would be to decide at runtime if to use /etc/x2go/rgb or /etc/nxagent/rgb. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Allow separate .keyboard files for x2goagent and nxagent. * Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files that get removed during code reduction. * Add 0991_fix-hr-typos.full+lite.patch and 991_fix-hr-typos.full.patch. Fix several typos in upstream code detected by lintian. * Makefile.nx-libs: Don't allow symlinks to point into buildroot. * Makefile.nx-libs: Install man pages via main Makefile. * Add Description: and Author: fields to various patch headers. * Makefile.nx-libs: Run make install for nxproxy first, then create the wrapper script. * Make install-lite rule in Makefile.nx-libs more predictable and not rely on nxproxy/Makefile.in. * Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp uninstallation has to be in uninstall-lite, not in uninstall-full. * Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Fix broken comment paragraph, whitespace fix. . * NX code reduction efforts (from 93Mb to 41Mb): - Drop more unused code in nx-X11/programs/Xserver/hw/. Do this in roll-tarball.sh and in debian/rules alike. - Stop shipping unused / very old xterm code. - Drop nx-X11/programs/Xserver/hw/xfree86 except of four files symlinked to other locations in the source tree at build time. - More source tree size reduction by analyzing what exactly of the Mesa source code in nx-X11/extras/ is used and what not. - Drop more unused folders from tarball release / before .deb package build: . nx-X11/programs/Xserver/miext/shadow/ . nx-X11/programs/Xserver/XpConfig/ . nx-X11/programs/Xserver/Xprint/ - Makefile.nx-libs: Don't install Mesa header files into DESTDIR anymore. - Unify source tree reduction (debian/rules vs. roll-tarball.sh) via file/ folder lists in text files named debian/CODE-REDUCTION_*. - Update 0991_fix-hr-typos.full.patch. Don't patch files that get removed by the NX code reduction effort. - Drop 0604_nx-X11_recent-freetype-API.full.patch. Not used in current build process. - Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files matter to the NX code reduction efforts. - Update 0031_nx-X11_parallel-make.full.patch. Don't patch .original files in NX code tree. - Drop patches: 0017_nx-X11_update-autotools-helper-files.full.patch, 0018_nx-X11_update-libtool-ltmain-script.full.patch, 0019_nx-X11_expat-build-against-system-libxmltok.full.patch. They patch files that are not used at build time. . * Patch system: - Prepend a "0" to every patch file name in debian/patches/. The patch order is now given by a 4 digit ID. Adapt only this changelog stanza to this modification. . * Debian/Ubuntu packaging: + Fully rework the way nx-libs gets packaged for Debian/Ubuntu. + Split up libnx-x11 into individual packages. + Provide dbg:packages for each bin:package containing binaries. + Use Makefile logic to install files into DESTDIR. + Provide dev:packages for each lib:package individually. + Provide nx-x11proto-*-dev packages for all libnx-* libraries. + Install _all_ library files (*.so*) to /usr/lib/<triplet>/, so no extra settings of LD_LIBRARY_PATH is necessary. + Add Multi-Arch support for Debian based distro versions that support Multi-Arch. + Support hardened builds for nxcomp* libraries. + Support hardened builds for nxagent and libNX_*.so files. + Add debian/*.symbols files for shared nx-X11 libraries. + Support .symbols for 64bit and 32bit alike. + Provide CDBS-generated debian/copyright.in file. . * debian/rules: + Backup nxcomp/VERSION file from NoMachine before replacing it with a symlink to debian/VERSION. Recreate the original file when cleaning up. + Fix removal of unused code (that part of the code that we know of so far). (The debian/rules file is a Makefile and Makefiles don't understand shell globbing with curly braces). + Correctly link config files (etc/rgb, etc/nxagent.keyboard, etc/x2goagent.keyboard) before dh_auto_build. + Add to B-D: expat. + Install upstream ChangeLogs into bin:packages. + Remove upstream nx-libs ChangeLog during override_dh_clean. + Use proper quoting on build flag vars (they may contain spaces). . * nx-libs.spec: + The gpg-offline bin:package is not available in our SLE repo. We can do without. + Update .spec file to meet changes in tarball size reduction and restructuring. + Use SONAME based library package naming scheme. + Mention NX technology in every package description. + Install man pages into bin:packages. + Make libNX_X11-6 and libXinerama1 compliant to Shared Library Policy. + Add Obsoletes: fields to all shared libs for marking the non-versioned library package (names) as obsolete. + Don't depend on nx-libs base package with fixed version. + Don't fail if removing *.a files fails due to the files being non-present. + Set PREFIX=%{_prefix} USRLIBDIR=%{_libdir} SHLIBDIR=%{_libdir} at build time. + Assure that BuildRoot: is set. + On SLE 11.x: libX* packages are prefixed with "xorg-x11-". + Install "%{_libdir}/nx/bin" into nxproxy package. . * debian/roll-tarball.sh: + Install etc/ files into etc/ subfolder (rgb, nxagent.keyboard, x2goagent.keyboard). . [ Horst Schirmeier ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix a typo that prevented the /etc/nxagent/keystrokes.cfg file from being parsed. (Fixes: #741). * Add 0321_nxagent_x2go-specific-keystroke-config.full.patch. If nxagent is launched as x2goagent, use X2Go-specific paths for the keystrokes.cfg file. (Fixes: #744). . [ Michael DePaulo ] * Security Fixes: - Rebase loads of X.Org patches (mainly from RHEL-5) against NX. If not all patches from a CVE patch series appear here, then it means that the affected file/code is not used in NX at build time. . - X.Org CVE-2011-2895: 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch - X.Org CVE-2011-4028: 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch - X.Org CVE-2013-4396: 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch - X.Org CVE-2013-6462: 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch - X.Org CVE-2014-0209: 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch - X.Org CVE-2014-0210: 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch - X.Org CVE-2014-0211: 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch - X.Org CVE-2014-8092: 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch - X.Org CVE-2014-8097: 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch - X.Org CVE-2014-8095: 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch - X.Org CVE-2014-8096: 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch - X.Org CVE-2014-8099: 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch - X.Org CVE-2014-8100: 1027-render-check-request-size-before-reading-it-CVE-2014.patch 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch - X.Org CVE-2014-8102: 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch - X.Org CVE-2014-8101: 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch - X.Org CVE-2014-8093: 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch 1036-glx-Integer-overflow-protection-for-non-generated-re.patch - X.Org CVE-2014-8098: 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch 1038-glx-Length-checking-for-non-generated-single-request.patch 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch - X.org CVE-2015-0255 1104-xkb-Check-strings-length-against-request-size.patch . - Security fixes with no assigned CVE: 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch . - Rebase the following patches that are prerequisites for the CVE-2015-0255 patch: 1101-Coverity-844-845-846-Fix-memory-leaks.patch 1102-include-introduce-byte-counting-functions.patch 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch . - Fix FTBFS due to the nxproxy executable already existing under /usr/lib/nx/bin/nx/ . [ Mihai Moldovan ] * Change string "X2go" to "X2Go" where appropriate. * CVE security review: - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch. Use xfree() instead of free() in nx-libs. - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch. Apply correctly on nx-libs 3.6.x. - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch. Human-readable version of "1 MB". - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch. Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c). - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Do proper input validation to fix for CVE-2011-2895. Regards, Mihai Moldovan

1 0

"X2Go: The Gathering 2015" starts 2015-06-19 - please respond ASAP if you want to participate!
by Stefan Baur 09 Mar '15

09 Mar '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Annuntio vobis gaudium magnum (I announce to you a great joy): We have a new, finalized location and date for +-----------------------------------------------------------------+ | X2Go: The Gathering 2015 - 2015-06-19 - 2015-06-21 @ Linuxhotel | +-----------------------------------------------------------------+ This year's X2Go community event will once again be a three-day "work and play" (coding, chatting, socializing) event at Linuxhotel, Essen, Germany. No sightseeing tour this year, as the feedback from last year was that you folks want to spend more time coding and socialising on-site or at the dinner table. Special thanks to Linuxhotel for jumping in and renewing their offer, as we had originally selected another location that didn't work out. *ATTENTION!* If you want to join us *and* want to sleep in one of the hotel rooms at the Linuxhotel, we need the number of beds and nights you want to reserve, as well as *your full name* (as printed on your passport) and *your nationality* by *2015-05-18* *23:59:59* *CEST* (yes, that's 2015-05-18, *not* 2015-06-18)!!! Very important!!! After that date, we will be unable to reserve a room for you! It would be really really cool if you could sign up sooner - and please also note that: a) we curently have a maximum of 10 beds available. First come, first serve! b) Most of our rooms this year will be single-bed rooms, which means the cost per night for the room alone is 30 EUR, not 15 as with the shared room arrangements. Complete pricing information is in the Wiki, see the link below at "Costs for Linuxhotel hotel rooms" c) Please indicate on your reservation whether you absolutely need a single room, or wheher you would be interested in a cheaper shared 2-bed bedroom, should they become available. Please send your reservation request to X2Go-ML-1(a)baur-itcs.de with the text "The Gathering" somewhere in the subject and bug me publicly on the X2Go-Project list if you don't receive a confirmation by e-mail after a day or two. Currently, the following core team members already have valid registrations and thus do not need to re-register: - - Mike#2 (core dev) - single room required - - Stefan Baur (project/community manager) - shared room optional - - Mihai (core dev) - single room required For the following people, I will grant reservation priority until 2015-03-31. Please be sure to complete your reservation until then (this means letting me know if you can come at all, how long you plan to stay, and whether you require/prefer a single room or not). - - Mike#1 (core dev) - just need the room category - - Kjetil Fleten (recurring participant) - room category, and days pls. - - Heinz-M. Graesing (core dev/co-founder) - - Martin Wimpress (recurring participant) - - Henning Heinold (recurring participant) Assuming all of you can make it and register in time, we still have two available beds. I will occasionally post updated availability information after 2015-03-31. Alex, you've previously indicated that you can't make it to Essen. If your situation changes/you change your mind about it, let me know ASAP. Jos, Kees, you have indicated that you probably don't want to return this year. I'd love to have you here, though. Do you think you could at least make it for Saturday, maybe, so you don't have to reserve a room? Or is the journey too long for a single day? If for some reason or other you do *not* need a place to sleep at Linuxhotel, but *do* want to join us, please *still* let us know in advance that you're planning to visit. There's no such hard deadline as for the room reservations, but you will need to "check in" (see "Admission fee" below) for our gathering with the Linuxhotel staff, so please *do* let us know in advance. *Costs for Linuxhotel hotel rooms* Rooms are available at 30 EUR/night (and since we're a two-night-, three-day event, expect to pay 60 EUR total for the room). Note that this is the price for a *single-bed* bedroom. There may be a possibility to get a cheaper, 15EUR/night shared bedroom arrangement, but this won't be clear until shortly before the actual event, so expect to pay 30EUR/night. It is also possible to book only one of the two nights if you can't make it for the entire weekend, but don't want to miss out on all the fun. *Admission fee* 5 EUR/day, again, since we're a three-day event, expect to 15 EUR total. This is a per-person conference room/infrastructure rent and beverages flat rate - *this includes beer and wine*! Food is not included in this fee. Expect that there will be no lunch/dinner served by Linuxhotel, thus it's totally cool with the Linuxhotel management if you bring your own (if you're flying in from abroad, please check import restrictions), or order from a delivery service. Also, since this is a summertime event, we might be able to have a BBQ in the park, assuming the $WEATHER_DEITY plays along nicely. *Cost overview* An overview of the costs is available at: http://wiki.x2go.org/doku.php/events:x2go-gathering-2015#cost_overview *Payment* You will have to pay in cash *upon arriving at Linuxhotel*. Sorry, we can't accept credit cards, debit cards, wire transfers, bitcoins or other forms of payment for this event - *cash only*. Also, all payments must be made in *Euro, not in foreign currencies*. Sorry about that, too. The processing fees for non-cash and/or non-Euro payments would drive up the prices. - -->Special Note for Mike#2: You're covered. We will be updating the Wiki page http://wiki.x2go.org/doku.php/events:x2go-gathering-2015 as more information becomes available. Certain things, like our breakfast options, or having lunch/dinner served by Linuxhotel instead of having to order from a delivery service (as it stands now), can only be planned once we know the exact number of participants. *Event schedule* The event schedule is still in the making. Note that this year, we will probably have the option to split up into smaller groups in different rooms for more effective co-working on individual topics, hands-on demonstrations, and for side-topic presentations that may not be of interest to the entire group. A notice that the Wiki page has been updated will be sent to X2Go-Project once we have that confirmed. Sincerely, Stefan Baur, "X2Go: The Gathering" event organizer - -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJU/iMjAAoJEG7d9BjNvlEZZZMH/i/Hu6n3QJsGw5uwnZY5JJLu sS9B27tbp/DFC8INZHZjBeIQfLJWdeTSpxTvHNdhnWANkIgiSYj3HgEG5wsyioHv 00dUqILCuA0syp57BZnAe2uqUMxwivpMjAObz4Ev+25nkdBhpQUvxhjYEmlOcr+V iO0ooy3aa6FD6YL0f0JaKeWJqB5ye4r2JLKDFvn3lq3DsP1Sry23AsBaY3eNFMjx chpoQtQAmmzOrII2SzGi1MDh/2gIXv0GgVTkjtsO654jAELOcXbocVPw70t7igQE 5ep74E0DU7hvOGc4hJIilNYS++5p+17xnVvOaGXMf7sp0G6ux0LE6LgExbh1MTA= =rFNG -----END PGP SIGNATURE-----

1 0

X2Go Desktop Sharing (3.1.1.2) released
by Mihai Moldovan 06 Mar '15

06 Mar '15

Dear all The X2Go project is proud to announce a new release of the X2Go component ,,x2godesktopsharing''. New gains of this version of ,,x2godesktopsharing'' are: o new translations for Dutch, Danish, Finnish, Estonian and Turkish languages o new support for openSUSE and SLE (sponsored by EuMetSat in Darmstadt, Germany) o better support for RPM-based distributions o various bug fixes for x2godesktopsharing.desktop file o let session startup more time to come up We thank Jos Wolfram, Mark Pedersen-Cook, Martti Pitkänen, Robert Parts and Kaan Özdinçer for improving the internationalization support of our software. X2Go Component: x2godesktopsharing Version: 3.1.1.2 Status: RELEASE Date: Fri, 06 Mar 2015 05:08:56 +0100 Changes: x2godesktopsharing (3.1.1.2) RELEASED; urgency=low . [ Jos Wolfram ] * New upstream version (3.1.1.2): - Update Dutch translation file. . [ Mike Gabriel ] * New upstream version (3.1.1.2): - Provide empty translation template for Estonian, Portuguese and Finnish. Update all .ts files. - Add GenericName= field to x2godesktopsharing.desktop. - Set Categories= field in x2godesktopsharing.desktop to Qt;KDE;Application;Network;RemoteAccess; - Provide debug output when we DENY session startup. - Wait 20s (instead of 5s) for cross-user desktopsharing to come up. - Set X2GO_CLIENT env variable before launching x2gostartagent. This correctly sets the <client> field in the session list output for desktop sharing sessions. Use current Qt API to achieve this. - x2godesktopsharing.desktop: Remove obsolete field Encoding=UTF-8. - x2godesktopsharing.desktop: Add Keywords= field. - x2godesktopsharing.desktop: Remove obsolete key Application from Categories= field. - x2godesktopsharing.desktop: Add Version= field. * debian/control: + Raise versioned D (x2godesktopsharing): x2goserver (>= 4.0.1.19). + Bump Standards: to 3.9.6. No changes needed. * x2godesktopsharing.spec: + Adapt to building on openSUSE/SLES. + Add x2godesktopsharing-rpmlintrc. + Own directories that we put files in. + Always set BuildRoot: parameter. + SLE (<= 11.3) builds: Use %suse_update_desktop_file -n <desktop-file> to mark .desktop file non-translatable. + Add B-R on SLE 11.3: update-desktop-files. + SLE and openSUSE ship procps, not procps-ng (at least by package name). . [ Mark Pedersen-Cook ] * New upstream version (3.1.1.2): - Update Danish translation file. . [ Martti Pitkänen ] * New upstream version (3.1.1.2): - Add Finnish translation file. . [ Robert Parts ] * New upstream version (3.1.1.2): - Add Estonian translation file. . [ Kaan Özdinçer ] * New upstream version (3.1.1.2): - Update Turkish translation file. . [ Mihai Moldovan ] * New upstream version (3.1.1.2): - Change string "X2go" to "X2Go" where appropriate. Regards, Mihai Moldovan

1 0

X2Go Client for Windows (4.0.3.2-20150301) released
by Mike DePaulo 01 Mar '15

01 Mar '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear all, This is to announce a new release of X2Go Client for Windows. This is the 3rd release of X2Go Client 4.0.3.2 for Windows. The 2nd release was 4.0.3.2-20150224. The changes are relative to that release. The changes in this release are: o Windows: Update bundled VcXsrv from 1.15.2.3-xp+vc2013+x2go1 to 1.15.2.4-xp+vc2013+x2go1. The difference is that VcXsrv's bundled version of freetype was updated from 2.5.3 to 2.5.5. This freetype update fixes CVE-2014-9656 through CVE-2014-9675. As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update. For the Windows-specific release notes for this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2 Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iF4EAREIAAYFAlTzBroACgkQIFy22CVQsivclQEAmn5i3I4X4m4QCeXweX9FsynO +Q7ts6ZWuNW6vypisR4BAMQBnV982KxY5plVShxODxWUBlyyz/Fqw1SVbsxNlDHW =JM6r -----END PGP SIGNATURE-----

1 0

X2Go Client for Windows (4.0.3.2-20150224) released
by Mike DePaulo 25 Feb '15

25 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear all, This is to announce a new release of X2Go Client for Windows. This is the 2nd release of X2Go Client 4.0.3.2 for Windows. The 1st release was 4.0.3.2-20150219. The changes are relative to that release. The changes in this release are: o Windows: Bundle new version of VcXsrv: 1.15.2.3-xp+vc2013+x2go1. The difference from 1.15.2.2-xp+vc2013+x2go1 is that CVE-2015-0255 has been fixed. o Windows: Update bundled nxproxy (nx-libs-lite) from 3.5.0.27 to 3.5.0.28. o Windows: Update bundled Cygwin libjpeg-turbo from 1.3.1-1 to 1.3.1-3. The difference is that CVE-2014-9092 has been fixed. o Windows: Update bundled Cygwin libpng from 1.5.18-1 to 1.5.21-2. In addition to other changes, CVE-2013-6954 has been fixed. o Windows: Copy the exact version of each cygwin DLL from the cygwin binary tarballs rather than copying the "rebased" version from an X2Go developer's cygwin installation. What effect this will have on users is TBD. However, it does mean that we are distributing the exact DLLs that the Cygwin project provides, which is desirable for security. As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update. For the Windows-specific release notes for this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2 Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iF4EAREIAAYFAlTtwDcACgkQIFy22CVQsiv4dgEAhFrLgYznW77+6Zb40gZX9NdI HTF2juTaDO5s3jZDXHABAKICuz0qBJwHhUPN5BOJRyPNW0hxW7eaVSqh8B/zak8l =DK/6 -----END PGP SIGNATURE-----

1 0

X2Go Server (4.0.1.19) released
by Mihai Moldovan 24 Feb '15

24 Feb '15

Dear all The X2Go project is proud to announce a new release of the X2Go component ,,x2goserver''. New gains of this version of ,,x2goserver'' are: o new support for openSUSE and SLE (sponsored by EuMetSat in Darmstadt, Germany) o new instructions for the translation process thanks to Mark Pedersen-Cook o cross-user X2Go Desktop Sharing working again o handle Active Directory usernames correctly when using SQLite o new man page for x2gogetapps with disclaimer suggested by Stefan Baur o a lot of bug fixes The X2Go project thanks Mark Pedersen-Cook, Robert Siemer, Stefan Baur, Matthew L. Dailey and Lars Wendler for their valuable input and submitted work. X2Go Component: x2goserver Version: 4.0.1.19 Status: RELEASE Date: Tue, 24 Feb 2015 21:49:22 +0100 Fixes these bug report(s): 405 632 633 638 644 664 668 671 672 675 676 678 697 698 700 712 715 727 728 770 Changes: x2goserver (4.0.1.19) RELEASED; urgency=medium . [ Mike Gabriel ] * New upstream version (4.0.1.19): - Use File::Which to detect if sshfs command is available before trying to mount a client-side folder. - Be a bit more tolerant when trying to detect if a desktop icon is to be removed (using regexp, not eq). - Xsession script: Prevent bash failures when sourcing external bash scripts beyond our scope. (Fixes: #632, #675). - x2gogetapps: Support scanning of sub-directories when searching for .desktop files. We allow to dive down one level into subdirs, we on purpose do not recursively dive into the complete subtree. (Fixes: #633). - Make man2html an optional tool. Don't fail if it is missing on the build system (required for openSUSE/SLES builds). - Fix x2goserver-xsession/Makefile on SUSE. Detect SUSE distro and create Xsession related directory symlinks (xinitrc.d and Xclients.d). - Hack for x2goserver-xsession/Makefile during SUSE builds. If directoy /usr/share/doc/packages/brp-check-suse is present, the build env is also considered to be a SUSE system. - Trigger Xsession code for SUSE systems (look for /etc/SUSE-brand or /etc/SuSE-release for SUSE system recognition). (Fixes: #671). - x2gosqlitewrapper.c: Fix rpmlint error: no-return-in-nonvoid-function. Return the exitcode of execve(). - Fix gramma in error message (in x2goresume-session). - x2gocleansessions: Call x2gormforward also on terminated sessions. This will make sure that re-assigned ports are really available on new session startup. - x2golistsessions(_root): Only update session state in session DB if x2goagent's state file really exists. This addresses a problem that occurs when x2golistsessions gets called via an x2gobroker-agent. The x2golistsessions script may show session states (--all-servers) of sessions on other servers that have session states files on their remote /tmp dirs. These files are not accessible for that x2golistsessions script and should simply be ignored. (Fixes: #638). - Provide pam_namespace support for has_agent_state_file() function. - Fix missing session list output if state file does not exist on the machine that runs x2golistsessions(_root). - Accept more verbose "DENY" output from x2godesktopsharing. - Make sure that all "su"-to-user-contexts use /bin/sh for wrapping around the executed command (in x2gocleansessions and x2golistsessions_root). - Also enforce /bin/sh as shell in su command in x2goprint. - README.i18n: Add file that explains the translation workflow for this package. Thanks to Mark Pedersen-Cook for drafting this file. - Make SSH agent forwarding work after having reconnected via SSH and having resumed a session. (Fixes: #672). Thanks to Robert Siemer for coming up with that idea. - Fix cross-user X2Go Desktop Sharing after being broken by implementing clipboard mode feature (and probably other code changes). - Document session startup / resumption failures (and their reasons) in server-side log output. - Handle AD domain users gracefully when X2Go is used with SQLite DB backend. (Fixes: #664). - Improve sanitizer, use 'x2gosid' sanitizer for session IDs everywhere. Drop unused 'pnixusername' sanitizer in 4.0.1.x release of X2Go Server. - Allow usernames in session IDs of length 48 chars. - Start sshfs with a timeout of 30 seconds (because it never finishes if something is wrong with the client-side TCP socket). Also remove/unmount mountpoints erroneously registered sshfs mountpoints if sshfs command times out. Furthermore, print errors to STDERR (not STDOUT). (Fixes: #405). - Handle execution of ss command from Perl script x2golistdesktops in a way that not only works on Debian, but also on Fedora et al. (Fixes: #727). - Provide legacy support for old File::Path packages in x2godbadmin. (Fixes: #715). - Fix wrong evocation of x2gosyslog ("error" -> "err"). - Use "undef $dbh" instead of "$dbh->disconnect()". Fixes SQLite3 issues on SLE 11.x. - Only call $dbh->sqlite_busy_timeout() if the $dbh object is capable of that. Works around a too-old DBD::SQLite package on SLE 11.x. - Legacy for applications (and X2Go scripts) that expect $SSH_CLIENT to be set in the X2Go session's environment. (Fixes: #644). - Add man page for x2gogetapps. Weave into that a security / disclaimer message as proposed by Stefan Baur. (Fixes: #728). * debian/control: + Add D (x2goserver): libfile-which-perl. + Add C (x2goserver: x2godesktopsharing (<< 3.1.1.2-0~). (Fixes: #700). + Bump Standards: to 3.9.6. No changes needed. + Don't depend on libdb-pg-perl for armhf builds. (Fixes: #712). Thanks to Heinrich Schuchardt for providing information on this. + Upgrade to D again (bin:package x2goserver): xfonts-base (Fixes: #770). * debian/x2goserver.docs: + Install README.i18n file into bin:package x2goserver. * x2goserver.spec: + Add to R: perl(File::Which). + Additionally adapt to building on openSUSE/SLES. + No shell expansion possible in obs-build, detect perl version only for non-SUSE builds. + Add to R: x2goserver-xsession. + Don't mention /etc/x2go/x2gosql/sql twice (directly and with wildcard). + No %{_sysconfdir}/x2go/Xclients.d on SUSE systems. + Use %{_localstatedir} instead of %{_sharedstatedir}. + Use proper if... then... clauses. + For SUSE builds: Add to R: shadow (useradd, groupadd). + Replace historical "egrep" with "grep -E". + Systemd support for SUSE >= 12.10. + Set %defattr macro for every bin:package. + SUSE and Fedora/RHEL have different package group names. + Add x2goserver-rpmlintrc file to handle some rpmlint errors and warnings. + SUSE has openssh, but no openssh-server. + Add to R (x2goserver): perl-X2Go-Server. + Add to R (diverse): perl(Config::Simple), perl(Switch) and perl(Capture::Tiny). + Add to R (x2goserver): perl(File::BaseDir). + Don't hard-code /var/lib/ in $HOME path of to-be-created user "x2gouser". + Add to BR: findutils. + For Fedora-like systems, don't make x2goserver bin:package authoritative for non-X2Go directories. (Fixes: #676). + Remove macro call %systemd_pre for Fedora/EPEL-7 builds. No such macro in Fedora/RHEL7. (Fixes: 698). + Create system user x2gouser with $HOME in /var/lib/x2go. (Fixes: #697). + Always set BuildRoot: parameter. + BuildRequires: SUSE <= 11.3 has xorg-x11, not xinit. + Requires (x2goserver-xsession): SUSE <= 11.3 has xorg-x11, not xinit. + No Bashisms in scriptlets. + rpmlint requires shared-mime-info at build time on SLE <= 11.3. + "%set_permissions" / "%verify_permissions" macros are not know in SLE <= 11.3. Using "%run permissions" and "%verify permissions" instead. + On SUSE, add permissions.d/x2goserver. + Fix SQLite wrapper permissions (02775 -> 02755) + Use if then clauses for creating user/group x2goprint. . [ Matthew L. Dailey ] * New upstream version (4.0.1.19): - x2gocleansessions: Redirect stdin, stdout and stderr to /dev/null, test for the existence of the file descriptor before issuing the close, only capture the file descriptor backreference in the regex and send any close failures to syslog. (Fixes: #678). . [ Lars Wendler ] * New upstream version (4.0.1.19): - Use "printf" instead of "echo -n". (Fixes: #668). Regards, Mihai Moldovan

1 0

X2Go Client for Windows (4.0.3.2-20150219) released
by Mike DePaulo 19 Feb '15

19 Feb '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Dear all, This is to announce a new Windows-specific release of the X2Go component ,,x2goclient'' This is the 1st release of X2Go Client 4.0.3.2 for Windows. There are no changes in this release of ,,x2goclient'' compared to the 4.0.3.2 release itself. You can read the list of changes in 4.0.3.2 in the following link. Note that many (but not all) of the 4.0.3.2 Windows changes were included in the 4.0.3.1-20150119 Windows- specific release. http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/159 For the Windows-specific release notes for this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2 Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iF4EAREIAAYFAlTl7CQACgkQIFy22CVQsivYNwEAqy1BOrDEevTmjwqu8nwjHqAH dJUjTJqPA8HUcGYzvwQBAIaOWuH2XWaslU7KHWwT0trScDawPuVXYkTKeGpopa5m =5g/7 -----END PGP SIGNATURE-----

1 0

X2Go Client 4.0.3.2 released
by Mihai Moldovan 19 Feb '15

19 Feb '15

Dear all The X2Go project is proud to announce a new release of the X2Go component ,,x2goclient''. New gains of this version of ,,x2goclient'' are: o new translations for Turkish language o multiple visual and message fixes (thanks to, e.g., Heinrich Schuchardt) o improved/additional debugging output via --debug o miscellaneous crash fixes o new command line option --broker-noauth-use-session-username: does not use system user name when talking to the broker, but the session-defined user name (thanks to Sergey Savko) o fixed broker authentication with complex passwords (thanks to Jason Alavaliant) o more reproducible Windows builds o newer, security-fixed external components for Windows builds o (experimental) support for VS2010 nmake on Windows o fixes a bug on OS X which left X2Go Client deadlocking when starting more than one session sequentially. We thank Kaan Özdinçer for improving the internationalization support of our software. We thank Jason Alavaliant, Sergey Savko, Heinrich Schuchardt and George Trakatelis for sending in patches adding features or fixing bugs in our software. X2Go Component: x2goclient Version: 4.0.3.2 Status: RELEASE Date: Thu, 19 Feb 2015 12:49:22 +0100 Fixes these bug report(s): 616 642 681 702 705 713 720 742 781 782 Changes: x2goclient (4.0.3.2) RELEASED; urgency=medium . [ Oleksandr Shneyder ] * New upstream release (4.0.3.2): - Fix placement of session folders in session card column. (Fixes: #681). - Send empty message in x2gohelper to stop AppStarting cursor. (Fixes: #616). - Fix multiple creations of modmap timer (OS_DARWIN). . [ Mike Gabriel ] * New upstream release (4.0.3.2): - Add several info/error/debug log message while hunting down #702. - Use app.setQuitOnLastWindowClosed(false) for the X2Go Client QtApplication to assure that X2Go Client does not arbitrarily exit during a running session. This fixes X2Go Client crashes that occur when printing via the CUPS-X2Go printing mechanism with activate print dialog popup on incoming print jobs and minimized main window. (Fixes: #702). - Be more exact when reporting rev forwarding tunnel request failures to the GUI user. Include the purpose of the tunnel (NX, audio, foldersharing) in the error message. - Enable debugging in sshprocess.cpp and sshmasterconnection.cpp if --debug is given. - sshmasterconnection.cpp: Fix several grammar issues in error messages. - When sharing a client-side folder, do not write the SSH pub key to client-side authorized_keys file if the folder-to-be-shared does not exist on the client. (Partially solves #405). - Fix string concatenation/layout of error message when tunnel I/O errors occur. - Improve debugging/logging the SSH connections made by X2Go Client. - Fix quotes when calling remote commands via SSH (esp. allow same quoting/ escaping style for libssh and openSSH+Krb based connections). (Fixes: #720). - FIXME: Disable PubkeyAuthentication _and_ PasswordAuthentication if GSSAPI authentication is activated. This is counter intuitive, though, and requires several other fixes in the authentication code. * x2goclient.spec: - Always set BuildRoot: parameter. . [ Sergey Savko ] * New upstream release (4.0.3.2): - Prevent passwordless re-logins into X2Go Session Broker if --broker-autologoff is used on the cmdline. (Fixes: #782). - Add new cmdline option --broker-noauth-use-session-username. When --broker-noauth is used, the broker does not know on behalf of which user to operate. This new option enables username syncing. When logging into X2Go Server, that username will be sent to the broker and be used for querying X2Go Broker Agents etc. (Fixes: #781). . [ Heinrich Schuchardt ] * New upstream release (4.0.3.2): - Base the layout dialogue "Session ID" (which shows up when starting a connection) on typographic points (instead of pixels). (Fixes: #713). . [ Jason Alavaliant ] * New upstream verson (4.0.3.2): - Use QUrl::toPercentEncoding() method to properly encode passwords sent to X2Go Session Broker. (Fixes: #705). . [ Mike DePaulo ] * New upstream release (4.0.3.2): - Windows: Win32 OpenSSL updates from 1.0.1j to 1.0.1L, which fixes the CVEs announced on 2015-01-08. - Windows: Cygwin OpenSSL updated from 1.0.1j-1 to 1.0.1k-1, which fixes the CVEs announced on 2015-01-08. - Windows: Bundle new version of VcXsrv: 1.15.2.2-xp+vc2013+x2go1. The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed. - Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining Pageant support). This fixes CVE-2014-8132, which shouldn't affect x2goclient because x2goclient uses the SSH client functionality, not the SSH server functionality. 0.6.4 also added 4 features related to ECDSA keys. - Windows: Fix compatibility with PulseAudio 6.0 - Windows: Remove workaround for audio input with old versions of PulseAudio (calling parec once per second) (Fixes: #742) Thanks George Trakatelis (uom.edu.gr) for submitting this change. - Windows: Enable X2Go Client for Windows to build under VS2010 nmake (but not the VS2010 IDE due to a Qt4 Visual Studio Add-in limitation) Note that the official builds are still build under MinGW. (Fixes: #642) Thanks George Trakatelis (uom.edu.gr) for submitting this feature. - Windows: Make builds easier, and updating bundled dependencies easier, by adding copy-deps-win32.bat. It copies the exact version of each dependency (DLL, executable, data, folder, etc) from x2goclient-contrib.git. . [ Kaan Ozdincer ] * New upstream version (4.0.3.2): - Add Turkish translation file. Regards, Mihai Moldovan

1 0

← Newer
1
...
13
14
15
16
17
18
19
...
41
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-announcements