x2go-dev March 2016

x2go-dev@lists.x2go.org

18 participants
126 discussions

Python X2Go Broker: API documentation
by Mike Gabriel 30 Mar '16

30 Mar '16

Hi all, I have just created an API documentation for the Python X2Go Broker: http://code.x2go.org/doc/python-x2gobroker/ Happy hacking, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/mailxchange/kronolith/fb.php?u=m.gabriel%4…

1 0

Bug#987: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #987 thanks Hello, we are very hopeful that X2Go issue #987 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#1000: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #1000 thanks Hello, we are very hopeful that X2Go issue #1000 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#928: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #928 thanks Hello, we are very hopeful that X2Go issue #928 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#973: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #973 thanks Hello, we are very hopeful that X2Go issue #973 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#860: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #860 thanks Hello, we are very hopeful that X2Go issue #860 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#921: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #921 thanks Hello, we are very hopeful that X2Go issue #921 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#953: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #953 thanks Hello, we are very hopeful that X2Go issue #953 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#948: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #948 thanks Hello, we are very hopeful that X2Go issue #948 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

Bug#487: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager 24 Mar '16

24 Mar '16

close #487 thanks Hello, we are very hopeful that X2Go issue #487 reported by you has been resolved in the new release (4.0.5.1) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.5.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=4f91293625f1b3c… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.5.1-0x2go1 Status: RELEASE Date: Thu, 24 Mar 2016 21:35:30 +0100 Fixes: 487 772 860 916 921 927 928 945 948 953 973 987 1000 Changes: x2goclient (4.0.5.1-0x2go1) RELEASED; urgency=low . [ Mihai Moldovan ] * New upstream release (4.0.5.1): - onmainwindow.cpp: include sshd PID file path option in quotes to support whitespaces within the var directory path on Windows. Add comment to revisit this later on non-Windows-platforms, too. Fixes: #916. - onmainwindow.cpp: do NOT reformat. Reverts most of the previous commit because it breaks code logic. - res/txt/packs: add adaptive method. - {macbuild.sh,x2goclient.pro}: pass MacPorts library and include path's to qmake. Due to the qt4-mac's changes, we do not automatically get these values automatically "appended" in a usable way anymore. - x2gosettings.cpp: let centralSettings () return false on Windows. - onmainwindow.cpp: be more precise in slotScDaemonError () regarding unknown and undefined errors. - onmainwindow.{cpp,h}: don't use a hardcoded path to xmodmap on OS X and handle errors more gracefully. Fixes: #487. - x2goclient.pro: fix typo --stdlib=... -> -stdlib=... Fixes: #973. - onmainwindow.cpp: add some more error handling for parsing the return value of x2golistsessions. As it turns out, it can happen that "invalid" strings are inserted in there, for instance by the perl interpreter itself. We need to skip over these, or the client crashes when splitting up the invalid lines. - macbuild.sh: add stdlib forcing. Should not be used unless you really know what you're doing. If you ponder using this, you probably don't. - res/resources.rcc: add Turkish translation file. Fixes: #987. - onmainwindow.cpp: use lowercase version of locale. Fixes: #953. Fixes loading up the nb_NO translation file, which is actually baked as nb_no into the binary. - sshmasterconnection.cpp: let challenge-auth-based login attempts fallback to normal password authentication if the initial challenge-auth-based attempt was unsuccessful. - sshmasterconnection.{cpp,h}: support variable number of challenge-auth-code-based prompts. - sshmasterconnection.cpp: don't check prompts for full string equality - a matching prefix is good enough. Amongst others, this fixes errors in conditions where the prompt does not contain a trailing whitespace, but X2Go Client expects one. - sshmasterconnection.cpp: add OATH TOTP prompt prefix. Fixes: #860. - res/i18n: refresh translation files again. - res/i18n/x2goclient_nb_no.ts: replace "X-Serv..." with "X.Org Server" where applicable. - res/i18n/x2goclient_nb_no.ts: correctly use "XQuartz" where necessary. - res/i18n/x2goclient_nb_no.ts: whitespace only. - res/i18n/x2goclient_nb_no.ts: fix up some "x2go" -> "X2Go" errors. - res/i18n/x2goclient_nb_no.ts: mark translation strings needing some care ("x2go..." -> "X2Go...") as unfinished for later fixup. - res/i18n/x2goclient_nb_no.ts: fix (meta data) typo introduced with last commit. - res/i18n/x2goclient_nl.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_de.ts: fixup translation by respecting the original messages' format, fixing typos and general improvements. - res/i18n/x2goclient_es.ts: fixup translation by respecting the original messages' format and other changes. - res/i18n/x2goclient_sv.ts: fixup translation by respecting the original messages' format and other changes. * debian/control: - Change apache2-dev | libc6-dev build dependency back to apache2-dev only. Otherwise, apache2-dev is not installed at all, even though theoretically available. The initial reasoning for this dependency type, apache2-dev not being available on all Ubuntu/Debian platforms, is not true anymore. - Change apache2-dev build dependency yet again to apache2-dev | apache2-threaded-dev. Turns out all Debian distros but wheezy (currently oldstable) have an apache2-dev package. Even oldoldstable (squeeze) does... . [ Oleksandr Shneyder ] * New upstream release (4.0.5.1): - xsettingswidget: compile only on Windows. - Add support for new style command line options of xfreerdp on direct RDP connections. (Fixes: #772). - Replace "::" with "_" for the desktop link name on Windows. - Fix direct RDP in broker mode. - Fix crashing client when editing session from SessionManageDialog. Fixes: #921. - Configure audio input in pulseaudio on Windows. - Reconnect ssh broker in case of IO Error. - Reformat source onmainwindow.cpp. - Disable settings editing if a directory with central settings is exists. - Format long names on session buttons. - Central settings for Linux, Mac and Windows. - Fix VCXSRV parameter to disable PRIMARY clipboard in X2Go Client for Windows. Fixes: #927. - Fix reading settings for direct RDP connections in broker mode. - Auto accept RSA Keys for SSH Broker with --add-to-known-hosts option. . [ Mike Gabriel ] * New upstream release (4.0.5.1): - xinerama.conf: Don't choke if screen coordintate lines in xinerama.conf start with a dash ("-"). (Fixes: #948). . [ Mike DePaulo ] * New upstream release (4.0.5.1): - Windows: Update bundled Win32 OpenSSL from 1.0.1p to 1.0.1q, which fixes the multiple CVEs announced on 2015-12-03. - Windows: Upgrade Cygwin components to latest versions as of 2016-01-21, except for the Cygwin DLL which is still at 1.7.33 in order to avoid breaking folder sharing and printer sharing due to 1.7.34's ACL/permissions changes. (authorized_keys file would often have mode 660 instead of 600) The latest components include most notably: + openssh 6.8p1-1-x2go1 -> 7.1p2-1-x2go1 (security update) + openssl 1.0.2d-1 -> 1.0.2e-1 (security update) - Windows: Update nxproxy from 3.5.0.31 to 3.5.0.32 - Windows: Update Unicode NSIS from 2.46.5 to 2.50.0 Pre-release, which fixes the DLL hijacking security vuln (NSIS bug 1125.) - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. . [ Orion Poplawski ] * New upstream release (4.0.5.1): - ssh{process,masterconnection}.cpp: run bash as a login shell when invoking any command remotely. Fixes: #928. Because this opens the door for ~/.bash_logout and friend scripts to be executed, which may contain calls to ncurses' reset or clear, also set the TERM variable to dump to not have unexpected output on stderr at logout time. - sshmasterconnection.cpp: check correct variable for validity: public key instead of private key (again.) Fixes: #945. . [ Klaus Ade Johnstad ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file. . [ Heinrich Schuchardt ] * New upstream version (4.0.5.1): - sshmasterconnection.cpp: don't fetch invalid proxy socket. Fixes: #1000. From http://doc.qt.io/qt-4.8/qabstractsocket.html#socketDescriptor: The socket descriptor is not available when QAbstractSocket is in UnconnectedState. So we have to connect to the proxy server first before retrieving the native socket. . [ Daniel Lindgren ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_sv.ts: update Swedish translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Jos Wolfkamp ] * New upstream version (4.0.5.1): - res/i18n/x2goclient_nl.ts: update Dutch translation file. . [ Stefan Baur ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_de.ts: update German translation file. . [ Ricardo Díaz Martín ] * New upstream release (4.0.5.1): - res/i18n/x2goclient_es.ts: update Spanish translation file.

2 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev March 2016