x2go-dev January 2014

x2go-dev@lists.x2go.org

15 participants
125 discussions

Bug#370: RPM package: nx-libs lacks Xinerama support
by Mike Gabriel 06 Jan '14

06 Jan '14

Package: nx-libs Severity: important Tag: rpm-package The current RPMs built from nx-libs HEAD lack Xinerama support because of missing symlinks. The links should be created like below when the package libNX_Xinerama gets installed: mike@minobo:/usr/lib64/nx/X11$ ls Xinerama/ -al insgesamt 16 libNX_X11.so.6 -> /usr/lib64/libX11.so.6 libNX_Xext.so.6 -> /usr/lib64//libXext.so.6 libXinerama.so -> ../libNX_Xinerama.so libXinerama.so.1 -> ../libNX_Xinerama.so.1 Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 3

Should I repackage x2goclient for windows 4.0.1.2 w/ NX 3.5.0.22?
by Michael DePaulo 05 Jan '14

05 Jan '14

If I did, would we call it 4.0.1.2.1 or something?

2 1

NX release 3.5.0.22
by Mike Gabriel 04 Jan '14

04 Jan '14

Hi Orion, hi other distro packages, please note that in NX release 3.5.0.22 the VERSION.x2goagent is not up-to-date. Please patch in the correct version during the packaging process (3.5.0.21 -> 3.5.0.22). Thanks and sorry for the inconvenience, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#314: X2Go issue (in src:nx-libs) has been marked as closed
by Mike Gabriel 04 Jan '14

04 Jan '14

close #314 thanks Hello, we are very hopeful that X2Go issue #314 reported by you has been resolved in the new release (2:3.5.0.22) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.22) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b07b3cca09f5aa4a5c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.22-0x2go1 Status: RELEASE Date: Sat, 04 Jan 2014 21:39:17 +0100 Fixes: 314 337 370 Changes: nx-libs (2:3.5.0.22-0x2go1) RELEASED; urgency=low . [ Mirraz Mirraz ] * Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs: one implicit function declaration issue and two array index out of bounds issues. (Fixes: #314). . [ Mike Gabriel ] * Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against recent (>= 2.5.0) libfreetype6 API. * Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. * Improve patch: 601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch. Improvements taken from the current Fedora package. Thanks to Orion Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled libraries. * Rename patch: 302_nxagent_configurable-keystrokes.full.patch to 320_nxagent_configurable-keystrokes.full.patch. * debian/source/format: + Switch to format 1.0. * debian/control: + Add libfreetype6-dev to Build-Depends: field. + Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in use anymore and not recommended at all to have that. + Make sure all nx-libs components depend on the very same version. * debian/rules: + Remove bundled libraries from source tree before building the package. * nx-libs.spec: + Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks to the Fedora package maintainers). File differs from the Fedora file already. + Clear (Fedora package) changelog. + Use local tarball, don't expect ,,-full'' in tarball name. + The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode __global_ldflags macro for EPEL builds. + Enable Xinerama support for RPM packages. (Fixes: #370). . [ Clemens Lang ] * Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).

2 1

Bug#337: X2Go issue (in src:nx-libs) has been marked as closed
by Mike Gabriel 04 Jan '14

04 Jan '14

close #337 thanks Hello, we are very hopeful that X2Go issue #337 reported by you has been resolved in the new release (2:3.5.0.22) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.22) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=6afd7646df1e75991a… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.22-0x2go1 Status: RELEASE Date: Sat, 04 Jan 2014 21:39:17 +0100 Fixes: 314 337 370 Changes: nx-libs (2:3.5.0.22-0x2go1) RELEASED; urgency=low . [ Mirraz Mirraz ] * Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs: one implicit function declaration issue and two array index out of bounds issues. (Fixes: #314). . [ Mike Gabriel ] * Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against recent (>= 2.5.0) libfreetype6 API. * Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. * Improve patch: 601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch. Improvements taken from the current Fedora package. Thanks to Orion Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled libraries. * Rename patch: 302_nxagent_configurable-keystrokes.full.patch to 320_nxagent_configurable-keystrokes.full.patch. * debian/source/format: + Switch to format 1.0. * debian/control: + Add libfreetype6-dev to Build-Depends: field. + Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in use anymore and not recommended at all to have that. + Make sure all nx-libs components depend on the very same version. * debian/rules: + Remove bundled libraries from source tree before building the package. * nx-libs.spec: + Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks to the Fedora package maintainers). File differs from the Fedora file already. + Clear (Fedora package) changelog. + Use local tarball, don't expect ,,-full'' in tarball name. + The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode __global_ldflags macro for EPEL builds. + Enable Xinerama support for RPM packages. (Fixes: #370). . [ Clemens Lang ] * Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).

2 1

Bug#370: X2Go issue (in src:nx-libs) has been marked as closed
by Mike Gabriel 04 Jan '14

04 Jan '14

close #370 thanks Hello, we are very hopeful that X2Go issue #370 reported by you has been resolved in the new release (2:3.5.0.22) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.22) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b07b3cca09f5aa4a5c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.22-0x2go1 Status: RELEASE Date: Sat, 04 Jan 2014 21:39:17 +0100 Fixes: 314 337 370 Changes: nx-libs (2:3.5.0.22-0x2go1) RELEASED; urgency=low . [ Mirraz Mirraz ] * Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs: one implicit function declaration issue and two array index out of bounds issues. (Fixes: #314). . [ Mike Gabriel ] * Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against recent (>= 2.5.0) libfreetype6 API. * Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. * Improve patch: 601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch. Improvements taken from the current Fedora package. Thanks to Orion Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled libraries. * Rename patch: 302_nxagent_configurable-keystrokes.full.patch to 320_nxagent_configurable-keystrokes.full.patch. * debian/source/format: + Switch to format 1.0. * debian/control: + Add libfreetype6-dev to Build-Depends: field. + Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in use anymore and not recommended at all to have that. + Make sure all nx-libs components depend on the very same version. * debian/rules: + Remove bundled libraries from source tree before building the package. * nx-libs.spec: + Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks to the Fedora package maintainers). File differs from the Fedora file already. + Clear (Fedora package) changelog. + Use local tarball, don't expect ,,-full'' in tarball name. + The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode __global_ldflags macro for EPEL builds. + Enable Xinerama support for RPM packages. (Fixes: #370). . [ Clemens Lang ] * Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).

2 1

Bug#370: X2Go issue (in src:nx-libs) has been marked as closed
by Mike Gabriel 04 Jan '14

04 Jan '14

close #370 thanks Hello, we are very hopeful that X2Go issue #370 reported by you has been resolved in the new release (2:3.5.0.22) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.22) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=6afd7646df1e75991a… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.22-0x2go1 Status: RELEASE Date: Sat, 04 Jan 2014 21:39:17 +0100 Fixes: 314 337 370 Changes: nx-libs (2:3.5.0.22-0x2go1) RELEASED; urgency=low . [ Mirraz Mirraz ] * Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs: one implicit function declaration issue and two array index out of bounds issues. (Fixes: #314). . [ Mike Gabriel ] * Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against recent (>= 2.5.0) libfreetype6 API. * Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. * Improve patch: 601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch. Improvements taken from the current Fedora package. Thanks to Orion Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled libraries. * Rename patch: 302_nxagent_configurable-keystrokes.full.patch to 320_nxagent_configurable-keystrokes.full.patch. * debian/source/format: + Switch to format 1.0. * debian/control: + Add libfreetype6-dev to Build-Depends: field. + Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in use anymore and not recommended at all to have that. + Make sure all nx-libs components depend on the very same version. * debian/rules: + Remove bundled libraries from source tree before building the package. * nx-libs.spec: + Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks to the Fedora package maintainers). File differs from the Fedora file already. + Clear (Fedora package) changelog. + Use local tarball, don't expect ,,-full'' in tarball name. + The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode __global_ldflags macro for EPEL builds. + Enable Xinerama support for RPM packages. (Fixes: #370). . [ Clemens Lang ] * Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).

2 1

Bug#314: X2Go issue (in src:nx-libs) has been marked as closed
by Mike Gabriel 04 Jan '14

04 Jan '14

close #314 thanks Hello, we are very hopeful that X2Go issue #314 reported by you has been resolved in the new release (2:3.5.0.22) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.22) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=6afd7646df1e75991a… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.22-0x2go1 Status: RELEASE Date: Sat, 04 Jan 2014 21:39:17 +0100 Fixes: 314 337 370 Changes: nx-libs (2:3.5.0.22-0x2go1) RELEASED; urgency=low . [ Mirraz Mirraz ] * Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs: one implicit function declaration issue and two array index out of bounds issues. (Fixes: #314). . [ Mike Gabriel ] * Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against recent (>= 2.5.0) libfreetype6 API. * Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. * Improve patch: 601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch. Improvements taken from the current Fedora package. Thanks to Orion Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled libraries. * Rename patch: 302_nxagent_configurable-keystrokes.full.patch to 320_nxagent_configurable-keystrokes.full.patch. * debian/source/format: + Switch to format 1.0. * debian/control: + Add libfreetype6-dev to Build-Depends: field. + Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in use anymore and not recommended at all to have that. + Make sure all nx-libs components depend on the very same version. * debian/rules: + Remove bundled libraries from source tree before building the package. * nx-libs.spec: + Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks to the Fedora package maintainers). File differs from the Fedora file already. + Clear (Fedora package) changelog. + Use local tarball, don't expect ,,-full'' in tarball name. + The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode __global_ldflags macro for EPEL builds. + Enable Xinerama support for RPM packages. (Fixes: #370). . [ Clemens Lang ] * Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).

2 1

Bug#337: X2Go issue (in src:nx-libs) has been marked as closed
by Mike Gabriel 04 Jan '14

04 Jan '14

close #337 thanks Hello, we are very hopeful that X2Go issue #337 reported by you has been resolved in the new release (2:3.5.0.22) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.22) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b07b3cca09f5aa4a5c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.22-0x2go1 Status: RELEASE Date: Sat, 04 Jan 2014 21:39:17 +0100 Fixes: 314 337 370 Changes: nx-libs (2:3.5.0.22-0x2go1) RELEASED; urgency=low . [ Mirraz Mirraz ] * Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs: one implicit function declaration issue and two array index out of bounds issues. (Fixes: #314). . [ Mike Gabriel ] * Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against recent (>= 2.5.0) libfreetype6 API. * Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. * Improve patch: 601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch. Improvements taken from the current Fedora package. Thanks to Orion Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled libraries. * Rename patch: 302_nxagent_configurable-keystrokes.full.patch to 320_nxagent_configurable-keystrokes.full.patch. * debian/source/format: + Switch to format 1.0. * debian/control: + Add libfreetype6-dev to Build-Depends: field. + Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in use anymore and not recommended at all to have that. + Make sure all nx-libs components depend on the very same version. * debian/rules: + Remove bundled libraries from source tree before building the package. * nx-libs.spec: + Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks to the Fedora package maintainers). File differs from the Fedora file already. + Clear (Fedora package) changelog. + Use local tarball, don't expect ,,-full'' in tarball name. + The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode __global_ldflags macro for EPEL builds. + Enable Xinerama support for RPM packages. (Fixes: #370). . [ Clemens Lang ] * Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).

2 1

CVE-2013-7261: (fwd:) root exploit in X2Go Server
by Mike Gabriel 04 Jan '14

04 Jan '14

Hi all, I have been noticed about a root exploit in X2Go Server code. This vulnerability has been (hopefully) fixed in X2Go Server 4.0.1.10 (and in the LTS release branch 4.0.0.8). This issue has now been a CVE ID to. Please see below. All distributors of X2Go Server, please provide package upgrades to your distribution. Thanks+Greets, Mike ----- Weitergeleitete Nachricht von cve-assign(a)mitre.org ----- Datum: Sat, 4 Jan 2014 11:23:29 -0500 (EST) Von: cve-assign(a)mitre.org Betreff: Re: root exploit in X2Go Server An: mike.gabriel(a)das-netzwerkteam.de Cc: cve-assign(a)mitre.org > this is to request or a CVE-ID. We have been reported and we have > fixed a root exploit in X2Go Server. > > In versions of X2Go Server previous to 4.0.0.8 (LTS release branch) > and previous to 4.0.1.10 (main release branch) a normal user could > gain root access to X2Go Server machines. > > The vulnerability has been fixed by these commits > > http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=c2036a1152a7e57… > http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=80ff6997550749a… Use CVE-2013-7261 for this issue involving root access through the use of shell metacharacters. - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] ----- Ende der weitergeleiteten Nachricht ----- -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev January 2014