x2go-dev June 2018

x2go-dev@lists.x2go.org

9 participants
100 discussions

Bug#1258: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager X2Go Release Manager 23 Jun '18

23 Jun '18

close #1258 thanks Hello, we are very hopeful that X2Go issue #1258 reported by you has been resolved in the new release (4.1.2.0) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.1.2.0) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=81565e3e4bd7ee3… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.1.2.0-0x2go1 Status: RELEASE Date: Fri, 22 Jun 2018 22:30:29 +0200 Fixes: 1156 1258 1263 Changes: x2goclient (4.1.2.0-0x2go1) RELEASED; urgency=medium . [ Mike DePaulo ] * New upstream version (4.1.2.0): - src/sshmasterconnection.cpp: Do not attempt to perform Interaction with SSH Server (e.g. for changing expired password) when using GSSAPI/Kerberos because the interaction code does not support it yet. Fixes: #1258 - Windows: Update PuTTY from 0.68 to 0.70, which fixes PuTTY vulns vuln-indirect-dll-hijack-2 & vuln-indirect-dll-hijack-3. Note that x2goclient was only ever affected if the permissions on the installation folder were changed to give users write access, or if x2goclient was copied/extracted to a folder where users could write. - Windows: Update Win32 OpenSSL from 1.0.2k to 1.0.2n Fixes several CVEs - Windows: Upgrade bundled VcXsrv from 1.17.0.0-3 (X2Go/Arctica Build) to 1.20.0.0 (upstream build) + Fixes https://github.com/ArcticaProject/nx-libs/issues/600 + Incompatible with XP & Vista + Unmodified except for strip-nondeterminism being run on .gz files . [ Oleksandr Shneyder ] * New upstream version (4.1.2.0): - don't start gpg agent for PGP card authentication. Use system agent instead. - change search string for pcsc_scan. - destroy unused SSH sessions for LDAP authentication. . [ Mihai Moldovan ] * New upstream version (4.1.2.0): - misc: update version to 4.1.2.0. - res/img/svg: add new lxqt.svg icon file (really helix.svg). - res/img/icons/*x*: add new rasterized lxqt.png files in different sizes. - res/qresources.qrc: add new lxqt files. - src/{onmainwindow.cpp,session{button,widget}.{cpp,h}}: add support for LXQt. Fixes: #1263. - src/sshmasterconnection.cpp: stop libssh/OpenSSL from querying for a passphrase if started with a controlling terminal. - x2goclient.pro: remove plugin references. - misc: change http:// to https:// where appropriate, but in actual code and translation files for now. - Makefile: remove plugin references. - Makefile: remove x2goclient_*.qm files in clean rule. - x2gobrowserplugin-2.4_1/: remove. - provider/: remove. - INSTALL: remove plugin references. - {{build,config}_win_plugin.bat,config_linux_{,static_}plugin.sh}: remove. - config_win.bat: remove plugin references. - src/{configdialog.cpp,onmainwindow{.cpp,{,_privat}.h}}: remove plugin references. - src/editconnectiondialog.cpp: do not connect signals to slots that do not exist on non-Linux platforms. - src/onmainwindow.cpp: add -nopn parameter to VcXsrv startup options, making the binary fail if it wasn't able to bind the requested port on all addresses. - src/onmainwindow.cpp: print out current DISPLAY value in debug log while starting X.Org Server on Windows. - src/onmainwindow.{cpp,h}: don't error out directly if starting the X.Org Server failed on Windows. Instead, try starting it three times, each time with a higher DISPLAY offset. On busy client machines, several clients raced for the sockets previously and often failed to start. Also check if the server binary actually is still alive before doing the TCP connection checks. A dead server won't be able to listen on a socket in the first place. - {src/{onmainwindow.{cpp,h},help.cpp},man/man1/x2goclient.1}: add new option --xserver-start-limit, replacing the formerly hardcoded limit of three tries. - src/onmainwindow.{cpp,h}: fix compile error on Windows - use std::size_t instead of std::ssize_t, treat zero as infinity value while parsing option value. - src/onmainwindow.cpp: handle a disabled X.Org Server start limit correctly. - src/onmainwindow.cpp: fix other compile errors/typos. - src/onmainwindow.cpp: another compile error/typo fix. - src/onmainwindow.cpp: let client recognize new --xserver-start-limit param correctly. - src/onmainwindow.cpp: add -silent-dup-error parameter to VcXsrv startup options, forcing it to silently fail without showing a dialog and thus keeping the process running. - src/onmainwindow.cpp: re-add periodic xmodmap keyboard sync for OS X/macOS platforms. Was dropped some time ago by accident. - src/onmainwindow.cpp: fix compile error on OS X/macOS. - copy-deps-win32.bat: update to 20160121-4 Cygwin bundle, shipping with chgrp. - src/onmainwindow.cpp: fix user-facing error messages in Windows X.Org Server startup functions. - src/pulsemanager.cpp: use QByteArray's constData () instead of data (), since we'll never modify the data anyway. - src/onmainwindow.cpp: hook-in chgrp for ~/.x2go/etc on Windows platforms to work around a Cygwin permissions bug. Fixes: #1156. - src/onmainwindow.cpp: QProcess:nullDevice () is only available on Qt 5.2+, so use a workaround for older versions. - src/onmainwindow.cpp: actually pass the correct group ID to the chgrp call and make sure that the warning dialog box also appears whenever the exit code indicates a failure. - src/onmainwindow.{cpp,h}: remove Cygwin permissions workaround via chgrp. - copy-deps-win32.bat: update to 20180615-1 Cygwin bundle, shipping with a further modified OpenSSH Server version at 7.7p1-1-x2go1 and without chgrp. - src/onmainwindow.cpp: disable private host key permissions check in OpenSSH Server on Windows. Fixes: #1156. - res/i18n/x2goclient_*.ts: update translation files. - res/i18n/x2goclient_fi.ts: whitespace and other fixups. - res/i18n/x2goclient_fi.ts: add missing numerus form translation and other fixups. - res/i18n/x2goclient_de.ts: another fixup I previously forgot about. - res/i18n/x2goclient_et.ts: whitespace and meta data fixup. - res/i18n/x2goclient_et.ts: typo fix: on+ma -> oma. * x2goclient.spec: - Remove plugin references. * debian/rules: - Remove plugin references. - Remove x2goclient_*.qm files removal. * debian/control: - Convert plugin packages to dummy transitional packages with no dependencies, remove other plugin references. * debian/: - x2goplugin{,-provider}.install: clear out. - {x2goplugin.dirs,x2goplugin-provider.dirs,x2goplugin-provider.links, x2goplugin-provider.post*}: remove. * debian/copyright: - Remove plugin references. . [ Martti Pitkänen ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fi.ts: update Finnish translation file. . [ Stefan Baur ] * New upstream release (4.1.2.0): - res/i18n/x2goclient_de.ts: update German translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Robert Parts ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_et.ts: update Estonian translation file.

2 1

Bug#1156: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager X2Go Release Manager 23 Jun '18

23 Jun '18

close #1156 thanks Hello, we are very hopeful that X2Go issue #1156 reported by you has been resolved in the new release (4.1.2.0) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.1.2.0) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=81565e3e4bd7ee3… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.1.2.0-0x2go1 Status: RELEASE Date: Fri, 22 Jun 2018 22:30:29 +0200 Fixes: 1156 1258 1263 Changes: x2goclient (4.1.2.0-0x2go1) RELEASED; urgency=medium . [ Mike DePaulo ] * New upstream version (4.1.2.0): - src/sshmasterconnection.cpp: Do not attempt to perform Interaction with SSH Server (e.g. for changing expired password) when using GSSAPI/Kerberos because the interaction code does not support it yet. Fixes: #1258 - Windows: Update PuTTY from 0.68 to 0.70, which fixes PuTTY vulns vuln-indirect-dll-hijack-2 & vuln-indirect-dll-hijack-3. Note that x2goclient was only ever affected if the permissions on the installation folder were changed to give users write access, or if x2goclient was copied/extracted to a folder where users could write. - Windows: Update Win32 OpenSSL from 1.0.2k to 1.0.2n Fixes several CVEs - Windows: Upgrade bundled VcXsrv from 1.17.0.0-3 (X2Go/Arctica Build) to 1.20.0.0 (upstream build) + Fixes https://github.com/ArcticaProject/nx-libs/issues/600 + Incompatible with XP & Vista + Unmodified except for strip-nondeterminism being run on .gz files . [ Oleksandr Shneyder ] * New upstream version (4.1.2.0): - don't start gpg agent for PGP card authentication. Use system agent instead. - change search string for pcsc_scan. - destroy unused SSH sessions for LDAP authentication. . [ Mihai Moldovan ] * New upstream version (4.1.2.0): - misc: update version to 4.1.2.0. - res/img/svg: add new lxqt.svg icon file (really helix.svg). - res/img/icons/*x*: add new rasterized lxqt.png files in different sizes. - res/qresources.qrc: add new lxqt files. - src/{onmainwindow.cpp,session{button,widget}.{cpp,h}}: add support for LXQt. Fixes: #1263. - src/sshmasterconnection.cpp: stop libssh/OpenSSL from querying for a passphrase if started with a controlling terminal. - x2goclient.pro: remove plugin references. - misc: change http:// to https:// where appropriate, but in actual code and translation files for now. - Makefile: remove plugin references. - Makefile: remove x2goclient_*.qm files in clean rule. - x2gobrowserplugin-2.4_1/: remove. - provider/: remove. - INSTALL: remove plugin references. - {{build,config}_win_plugin.bat,config_linux_{,static_}plugin.sh}: remove. - config_win.bat: remove plugin references. - src/{configdialog.cpp,onmainwindow{.cpp,{,_privat}.h}}: remove plugin references. - src/editconnectiondialog.cpp: do not connect signals to slots that do not exist on non-Linux platforms. - src/onmainwindow.cpp: add -nopn parameter to VcXsrv startup options, making the binary fail if it wasn't able to bind the requested port on all addresses. - src/onmainwindow.cpp: print out current DISPLAY value in debug log while starting X.Org Server on Windows. - src/onmainwindow.{cpp,h}: don't error out directly if starting the X.Org Server failed on Windows. Instead, try starting it three times, each time with a higher DISPLAY offset. On busy client machines, several clients raced for the sockets previously and often failed to start. Also check if the server binary actually is still alive before doing the TCP connection checks. A dead server won't be able to listen on a socket in the first place. - {src/{onmainwindow.{cpp,h},help.cpp},man/man1/x2goclient.1}: add new option --xserver-start-limit, replacing the formerly hardcoded limit of three tries. - src/onmainwindow.{cpp,h}: fix compile error on Windows - use std::size_t instead of std::ssize_t, treat zero as infinity value while parsing option value. - src/onmainwindow.cpp: handle a disabled X.Org Server start limit correctly. - src/onmainwindow.cpp: fix other compile errors/typos. - src/onmainwindow.cpp: another compile error/typo fix. - src/onmainwindow.cpp: let client recognize new --xserver-start-limit param correctly. - src/onmainwindow.cpp: add -silent-dup-error parameter to VcXsrv startup options, forcing it to silently fail without showing a dialog and thus keeping the process running. - src/onmainwindow.cpp: re-add periodic xmodmap keyboard sync for OS X/macOS platforms. Was dropped some time ago by accident. - src/onmainwindow.cpp: fix compile error on OS X/macOS. - copy-deps-win32.bat: update to 20160121-4 Cygwin bundle, shipping with chgrp. - src/onmainwindow.cpp: fix user-facing error messages in Windows X.Org Server startup functions. - src/pulsemanager.cpp: use QByteArray's constData () instead of data (), since we'll never modify the data anyway. - src/onmainwindow.cpp: hook-in chgrp for ~/.x2go/etc on Windows platforms to work around a Cygwin permissions bug. Fixes: #1156. - src/onmainwindow.cpp: QProcess:nullDevice () is only available on Qt 5.2+, so use a workaround for older versions. - src/onmainwindow.cpp: actually pass the correct group ID to the chgrp call and make sure that the warning dialog box also appears whenever the exit code indicates a failure. - src/onmainwindow.{cpp,h}: remove Cygwin permissions workaround via chgrp. - copy-deps-win32.bat: update to 20180615-1 Cygwin bundle, shipping with a further modified OpenSSH Server version at 7.7p1-1-x2go1 and without chgrp. - src/onmainwindow.cpp: disable private host key permissions check in OpenSSH Server on Windows. Fixes: #1156. - res/i18n/x2goclient_*.ts: update translation files. - res/i18n/x2goclient_fi.ts: whitespace and other fixups. - res/i18n/x2goclient_fi.ts: add missing numerus form translation and other fixups. - res/i18n/x2goclient_de.ts: another fixup I previously forgot about. - res/i18n/x2goclient_et.ts: whitespace and meta data fixup. - res/i18n/x2goclient_et.ts: typo fix: on+ma -> oma. * x2goclient.spec: - Remove plugin references. * debian/rules: - Remove plugin references. - Remove x2goclient_*.qm files removal. * debian/control: - Convert plugin packages to dummy transitional packages with no dependencies, remove other plugin references. * debian/: - x2goplugin{,-provider}.install: clear out. - {x2goplugin.dirs,x2goplugin-provider.dirs,x2goplugin-provider.links, x2goplugin-provider.post*}: remove. * debian/copyright: - Remove plugin references. . [ Martti Pitkänen ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fi.ts: update Finnish translation file. . [ Stefan Baur ] * New upstream release (4.1.2.0): - res/i18n/x2goclient_de.ts: update German translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Robert Parts ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_et.ts: update Estonian translation file.

2 1

Bug#1263: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager X2Go Release Manager 22 Jun '18

22 Jun '18

close #1263 thanks Hello, we are very hopeful that X2Go issue #1263 reported by you has been resolved in the new release (4.1.2.0) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.1.2.0) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=bc5c972f6fb84e6… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.1.2.0-0x2go1 Status: RELEASE Date: Fri, 22 Jun 2018 22:30:29 +0200 Fixes: 1156 1258 1263 Changes: x2goclient (4.1.2.0-0x2go1) RELEASED; urgency=medium . [ Mike DePaulo ] * New upstream version (4.1.2.0): - src/sshmasterconnection.cpp: Do not attempt to perform Interaction with SSH Server (e.g. for changing expired password) when using GSSAPI/Kerberos because the interaction code does not support it yet. Fixes: #1258 - Windows: Update PuTTY from 0.68 to 0.70, which fixes PuTTY vulns vuln-indirect-dll-hijack-2 & vuln-indirect-dll-hijack-3. Note that x2goclient was only ever affected if the permissions on the installation folder were changed to give users write access, or if x2goclient was copied/extracted to a folder where users could write. - Windows: Update Win32 OpenSSL from 1.0.2k to 1.0.2n Fixes several CVEs - Windows: Upgrade bundled VcXsrv from 1.17.0.0-3 (X2Go/Arctica Build) to 1.20.0.0 (upstream build) + Fixes https://github.com/ArcticaProject/nx-libs/issues/600 + Incompatible with XP & Vista + Unmodified except for strip-nondeterminism being run on .gz files . [ Oleksandr Shneyder ] * New upstream version (4.1.2.0): - don't start gpg agent for PGP card authentication. Use system agent instead. - change search string for pcsc_scan. - destroy unused SSH sessions for LDAP authentication. . [ Mihai Moldovan ] * New upstream version (4.1.2.0): - misc: update version to 4.1.2.0. - res/img/svg: add new lxqt.svg icon file (really helix.svg). - res/img/icons/*x*: add new rasterized lxqt.png files in different sizes. - res/qresources.qrc: add new lxqt files. - src/{onmainwindow.cpp,session{button,widget}.{cpp,h}}: add support for LXQt. Fixes: #1263. - src/sshmasterconnection.cpp: stop libssh/OpenSSL from querying for a passphrase if started with a controlling terminal. - x2goclient.pro: remove plugin references. - misc: change http:// to https:// where appropriate, but in actual code and translation files for now. - Makefile: remove plugin references. - Makefile: remove x2goclient_*.qm files in clean rule. - x2gobrowserplugin-2.4_1/: remove. - provider/: remove. - INSTALL: remove plugin references. - {{build,config}_win_plugin.bat,config_linux_{,static_}plugin.sh}: remove. - config_win.bat: remove plugin references. - src/{configdialog.cpp,onmainwindow{.cpp,{,_privat}.h}}: remove plugin references. - src/editconnectiondialog.cpp: do not connect signals to slots that do not exist on non-Linux platforms. - src/onmainwindow.cpp: add -nopn parameter to VcXsrv startup options, making the binary fail if it wasn't able to bind the requested port on all addresses. - src/onmainwindow.cpp: print out current DISPLAY value in debug log while starting X.Org Server on Windows. - src/onmainwindow.{cpp,h}: don't error out directly if starting the X.Org Server failed on Windows. Instead, try starting it three times, each time with a higher DISPLAY offset. On busy client machines, several clients raced for the sockets previously and often failed to start. Also check if the server binary actually is still alive before doing the TCP connection checks. A dead server won't be able to listen on a socket in the first place. - {src/{onmainwindow.{cpp,h},help.cpp},man/man1/x2goclient.1}: add new option --xserver-start-limit, replacing the formerly hardcoded limit of three tries. - src/onmainwindow.{cpp,h}: fix compile error on Windows - use std::size_t instead of std::ssize_t, treat zero as infinity value while parsing option value. - src/onmainwindow.cpp: handle a disabled X.Org Server start limit correctly. - src/onmainwindow.cpp: fix other compile errors/typos. - src/onmainwindow.cpp: another compile error/typo fix. - src/onmainwindow.cpp: let client recognize new --xserver-start-limit param correctly. - src/onmainwindow.cpp: add -silent-dup-error parameter to VcXsrv startup options, forcing it to silently fail without showing a dialog and thus keeping the process running. - src/onmainwindow.cpp: re-add periodic xmodmap keyboard sync for OS X/macOS platforms. Was dropped some time ago by accident. - src/onmainwindow.cpp: fix compile error on OS X/macOS. - copy-deps-win32.bat: update to 20160121-4 Cygwin bundle, shipping with chgrp. - src/onmainwindow.cpp: fix user-facing error messages in Windows X.Org Server startup functions. - src/pulsemanager.cpp: use QByteArray's constData () instead of data (), since we'll never modify the data anyway. - src/onmainwindow.cpp: hook-in chgrp for ~/.x2go/etc on Windows platforms to work around a Cygwin permissions bug. Fixes: #1156. - src/onmainwindow.cpp: QProcess:nullDevice () is only available on Qt 5.2+, so use a workaround for older versions. - src/onmainwindow.cpp: actually pass the correct group ID to the chgrp call and make sure that the warning dialog box also appears whenever the exit code indicates a failure. - src/onmainwindow.{cpp,h}: remove Cygwin permissions workaround via chgrp. - copy-deps-win32.bat: update to 20180615-1 Cygwin bundle, shipping with a further modified OpenSSH Server version at 7.7p1-1-x2go1 and without chgrp. - src/onmainwindow.cpp: disable private host key permissions check in OpenSSH Server on Windows. Fixes: #1156. - res/i18n/x2goclient_*.ts: update translation files. - res/i18n/x2goclient_fi.ts: whitespace and other fixups. - res/i18n/x2goclient_fi.ts: add missing numerus form translation and other fixups. - res/i18n/x2goclient_de.ts: another fixup I previously forgot about. - res/i18n/x2goclient_et.ts: whitespace and meta data fixup. - res/i18n/x2goclient_et.ts: typo fix: on+ma -> oma. * x2goclient.spec: - Remove plugin references. * debian/rules: - Remove plugin references. - Remove x2goclient_*.qm files removal. * debian/control: - Convert plugin packages to dummy transitional packages with no dependencies, remove other plugin references. * debian/: - x2goplugin{,-provider}.install: clear out. - {x2goplugin.dirs,x2goplugin-provider.dirs,x2goplugin-provider.links, x2goplugin-provider.post*}: remove. * debian/copyright: - Remove plugin references. . [ Martti Pitkänen ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fi.ts: update Finnish translation file. . [ Stefan Baur ] * New upstream release (4.1.2.0): - res/i18n/x2goclient_de.ts: update German translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Robert Parts ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_et.ts: update Estonian translation file.

2 1

Bug#1156: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager X2Go Release Manager 22 Jun '18

22 Jun '18

close #1156 thanks Hello, we are very hopeful that X2Go issue #1156 reported by you has been resolved in the new release (4.1.2.0) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.1.2.0) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=bc5c972f6fb84e6… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.1.2.0-0x2go1 Status: RELEASE Date: Fri, 22 Jun 2018 22:30:29 +0200 Fixes: 1156 1258 1263 Changes: x2goclient (4.1.2.0-0x2go1) RELEASED; urgency=medium . [ Mike DePaulo ] * New upstream version (4.1.2.0): - src/sshmasterconnection.cpp: Do not attempt to perform Interaction with SSH Server (e.g. for changing expired password) when using GSSAPI/Kerberos because the interaction code does not support it yet. Fixes: #1258 - Windows: Update PuTTY from 0.68 to 0.70, which fixes PuTTY vulns vuln-indirect-dll-hijack-2 & vuln-indirect-dll-hijack-3. Note that x2goclient was only ever affected if the permissions on the installation folder were changed to give users write access, or if x2goclient was copied/extracted to a folder where users could write. - Windows: Update Win32 OpenSSL from 1.0.2k to 1.0.2n Fixes several CVEs - Windows: Upgrade bundled VcXsrv from 1.17.0.0-3 (X2Go/Arctica Build) to 1.20.0.0 (upstream build) + Fixes https://github.com/ArcticaProject/nx-libs/issues/600 + Incompatible with XP & Vista + Unmodified except for strip-nondeterminism being run on .gz files . [ Oleksandr Shneyder ] * New upstream version (4.1.2.0): - don't start gpg agent for PGP card authentication. Use system agent instead. - change search string for pcsc_scan. - destroy unused SSH sessions for LDAP authentication. . [ Mihai Moldovan ] * New upstream version (4.1.2.0): - misc: update version to 4.1.2.0. - res/img/svg: add new lxqt.svg icon file (really helix.svg). - res/img/icons/*x*: add new rasterized lxqt.png files in different sizes. - res/qresources.qrc: add new lxqt files. - src/{onmainwindow.cpp,session{button,widget}.{cpp,h}}: add support for LXQt. Fixes: #1263. - src/sshmasterconnection.cpp: stop libssh/OpenSSL from querying for a passphrase if started with a controlling terminal. - x2goclient.pro: remove plugin references. - misc: change http:// to https:// where appropriate, but in actual code and translation files for now. - Makefile: remove plugin references. - Makefile: remove x2goclient_*.qm files in clean rule. - x2gobrowserplugin-2.4_1/: remove. - provider/: remove. - INSTALL: remove plugin references. - {{build,config}_win_plugin.bat,config_linux_{,static_}plugin.sh}: remove. - config_win.bat: remove plugin references. - src/{configdialog.cpp,onmainwindow{.cpp,{,_privat}.h}}: remove plugin references. - src/editconnectiondialog.cpp: do not connect signals to slots that do not exist on non-Linux platforms. - src/onmainwindow.cpp: add -nopn parameter to VcXsrv startup options, making the binary fail if it wasn't able to bind the requested port on all addresses. - src/onmainwindow.cpp: print out current DISPLAY value in debug log while starting X.Org Server on Windows. - src/onmainwindow.{cpp,h}: don't error out directly if starting the X.Org Server failed on Windows. Instead, try starting it three times, each time with a higher DISPLAY offset. On busy client machines, several clients raced for the sockets previously and often failed to start. Also check if the server binary actually is still alive before doing the TCP connection checks. A dead server won't be able to listen on a socket in the first place. - {src/{onmainwindow.{cpp,h},help.cpp},man/man1/x2goclient.1}: add new option --xserver-start-limit, replacing the formerly hardcoded limit of three tries. - src/onmainwindow.{cpp,h}: fix compile error on Windows - use std::size_t instead of std::ssize_t, treat zero as infinity value while parsing option value. - src/onmainwindow.cpp: handle a disabled X.Org Server start limit correctly. - src/onmainwindow.cpp: fix other compile errors/typos. - src/onmainwindow.cpp: another compile error/typo fix. - src/onmainwindow.cpp: let client recognize new --xserver-start-limit param correctly. - src/onmainwindow.cpp: add -silent-dup-error parameter to VcXsrv startup options, forcing it to silently fail without showing a dialog and thus keeping the process running. - src/onmainwindow.cpp: re-add periodic xmodmap keyboard sync for OS X/macOS platforms. Was dropped some time ago by accident. - src/onmainwindow.cpp: fix compile error on OS X/macOS. - copy-deps-win32.bat: update to 20160121-4 Cygwin bundle, shipping with chgrp. - src/onmainwindow.cpp: fix user-facing error messages in Windows X.Org Server startup functions. - src/pulsemanager.cpp: use QByteArray's constData () instead of data (), since we'll never modify the data anyway. - src/onmainwindow.cpp: hook-in chgrp for ~/.x2go/etc on Windows platforms to work around a Cygwin permissions bug. Fixes: #1156. - src/onmainwindow.cpp: QProcess:nullDevice () is only available on Qt 5.2+, so use a workaround for older versions. - src/onmainwindow.cpp: actually pass the correct group ID to the chgrp call and make sure that the warning dialog box also appears whenever the exit code indicates a failure. - src/onmainwindow.{cpp,h}: remove Cygwin permissions workaround via chgrp. - copy-deps-win32.bat: update to 20180615-1 Cygwin bundle, shipping with a further modified OpenSSH Server version at 7.7p1-1-x2go1 and without chgrp. - src/onmainwindow.cpp: disable private host key permissions check in OpenSSH Server on Windows. Fixes: #1156. - res/i18n/x2goclient_*.ts: update translation files. - res/i18n/x2goclient_fi.ts: whitespace and other fixups. - res/i18n/x2goclient_fi.ts: add missing numerus form translation and other fixups. - res/i18n/x2goclient_de.ts: another fixup I previously forgot about. - res/i18n/x2goclient_et.ts: whitespace and meta data fixup. - res/i18n/x2goclient_et.ts: typo fix: on+ma -> oma. * x2goclient.spec: - Remove plugin references. * debian/rules: - Remove plugin references. - Remove x2goclient_*.qm files removal. * debian/control: - Convert plugin packages to dummy transitional packages with no dependencies, remove other plugin references. * debian/: - x2goplugin{,-provider}.install: clear out. - {x2goplugin.dirs,x2goplugin-provider.dirs,x2goplugin-provider.links, x2goplugin-provider.post*}: remove. * debian/copyright: - Remove plugin references. . [ Martti Pitkänen ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fi.ts: update Finnish translation file. . [ Stefan Baur ] * New upstream release (4.1.2.0): - res/i18n/x2goclient_de.ts: update German translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Robert Parts ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_et.ts: update Estonian translation file.

2 1

Bug#1258: X2Go issue (in src:x2goclient) has been marked as closed
by X2Go Release Manager X2Go Release Manager 22 Jun '18

22 Jun '18

close #1258 thanks Hello, we are very hopeful that X2Go issue #1258 reported by you has been resolved in the new release (4.1.2.0) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.1.2.0) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=bc5c972f6fb84e6… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.1.2.0-0x2go1 Status: RELEASE Date: Fri, 22 Jun 2018 22:30:29 +0200 Fixes: 1156 1258 1263 Changes: x2goclient (4.1.2.0-0x2go1) RELEASED; urgency=medium . [ Mike DePaulo ] * New upstream version (4.1.2.0): - src/sshmasterconnection.cpp: Do not attempt to perform Interaction with SSH Server (e.g. for changing expired password) when using GSSAPI/Kerberos because the interaction code does not support it yet. Fixes: #1258 - Windows: Update PuTTY from 0.68 to 0.70, which fixes PuTTY vulns vuln-indirect-dll-hijack-2 & vuln-indirect-dll-hijack-3. Note that x2goclient was only ever affected if the permissions on the installation folder were changed to give users write access, or if x2goclient was copied/extracted to a folder where users could write. - Windows: Update Win32 OpenSSL from 1.0.2k to 1.0.2n Fixes several CVEs - Windows: Upgrade bundled VcXsrv from 1.17.0.0-3 (X2Go/Arctica Build) to 1.20.0.0 (upstream build) + Fixes https://github.com/ArcticaProject/nx-libs/issues/600 + Incompatible with XP & Vista + Unmodified except for strip-nondeterminism being run on .gz files . [ Oleksandr Shneyder ] * New upstream version (4.1.2.0): - don't start gpg agent for PGP card authentication. Use system agent instead. - change search string for pcsc_scan. - destroy unused SSH sessions for LDAP authentication. . [ Mihai Moldovan ] * New upstream version (4.1.2.0): - misc: update version to 4.1.2.0. - res/img/svg: add new lxqt.svg icon file (really helix.svg). - res/img/icons/*x*: add new rasterized lxqt.png files in different sizes. - res/qresources.qrc: add new lxqt files. - src/{onmainwindow.cpp,session{button,widget}.{cpp,h}}: add support for LXQt. Fixes: #1263. - src/sshmasterconnection.cpp: stop libssh/OpenSSL from querying for a passphrase if started with a controlling terminal. - x2goclient.pro: remove plugin references. - misc: change http:// to https:// where appropriate, but in actual code and translation files for now. - Makefile: remove plugin references. - Makefile: remove x2goclient_*.qm files in clean rule. - x2gobrowserplugin-2.4_1/: remove. - provider/: remove. - INSTALL: remove plugin references. - {{build,config}_win_plugin.bat,config_linux_{,static_}plugin.sh}: remove. - config_win.bat: remove plugin references. - src/{configdialog.cpp,onmainwindow{.cpp,{,_privat}.h}}: remove plugin references. - src/editconnectiondialog.cpp: do not connect signals to slots that do not exist on non-Linux platforms. - src/onmainwindow.cpp: add -nopn parameter to VcXsrv startup options, making the binary fail if it wasn't able to bind the requested port on all addresses. - src/onmainwindow.cpp: print out current DISPLAY value in debug log while starting X.Org Server on Windows. - src/onmainwindow.{cpp,h}: don't error out directly if starting the X.Org Server failed on Windows. Instead, try starting it three times, each time with a higher DISPLAY offset. On busy client machines, several clients raced for the sockets previously and often failed to start. Also check if the server binary actually is still alive before doing the TCP connection checks. A dead server won't be able to listen on a socket in the first place. - {src/{onmainwindow.{cpp,h},help.cpp},man/man1/x2goclient.1}: add new option --xserver-start-limit, replacing the formerly hardcoded limit of three tries. - src/onmainwindow.{cpp,h}: fix compile error on Windows - use std::size_t instead of std::ssize_t, treat zero as infinity value while parsing option value. - src/onmainwindow.cpp: handle a disabled X.Org Server start limit correctly. - src/onmainwindow.cpp: fix other compile errors/typos. - src/onmainwindow.cpp: another compile error/typo fix. - src/onmainwindow.cpp: let client recognize new --xserver-start-limit param correctly. - src/onmainwindow.cpp: add -silent-dup-error parameter to VcXsrv startup options, forcing it to silently fail without showing a dialog and thus keeping the process running. - src/onmainwindow.cpp: re-add periodic xmodmap keyboard sync for OS X/macOS platforms. Was dropped some time ago by accident. - src/onmainwindow.cpp: fix compile error on OS X/macOS. - copy-deps-win32.bat: update to 20160121-4 Cygwin bundle, shipping with chgrp. - src/onmainwindow.cpp: fix user-facing error messages in Windows X.Org Server startup functions. - src/pulsemanager.cpp: use QByteArray's constData () instead of data (), since we'll never modify the data anyway. - src/onmainwindow.cpp: hook-in chgrp for ~/.x2go/etc on Windows platforms to work around a Cygwin permissions bug. Fixes: #1156. - src/onmainwindow.cpp: QProcess:nullDevice () is only available on Qt 5.2+, so use a workaround for older versions. - src/onmainwindow.cpp: actually pass the correct group ID to the chgrp call and make sure that the warning dialog box also appears whenever the exit code indicates a failure. - src/onmainwindow.{cpp,h}: remove Cygwin permissions workaround via chgrp. - copy-deps-win32.bat: update to 20180615-1 Cygwin bundle, shipping with a further modified OpenSSH Server version at 7.7p1-1-x2go1 and without chgrp. - src/onmainwindow.cpp: disable private host key permissions check in OpenSSH Server on Windows. Fixes: #1156. - res/i18n/x2goclient_*.ts: update translation files. - res/i18n/x2goclient_fi.ts: whitespace and other fixups. - res/i18n/x2goclient_fi.ts: add missing numerus form translation and other fixups. - res/i18n/x2goclient_de.ts: another fixup I previously forgot about. - res/i18n/x2goclient_et.ts: whitespace and meta data fixup. - res/i18n/x2goclient_et.ts: typo fix: on+ma -> oma. * x2goclient.spec: - Remove plugin references. * debian/rules: - Remove plugin references. - Remove x2goclient_*.qm files removal. * debian/control: - Convert plugin packages to dummy transitional packages with no dependencies, remove other plugin references. * debian/: - x2goplugin{,-provider}.install: clear out. - {x2goplugin.dirs,x2goplugin-provider.dirs,x2goplugin-provider.links, x2goplugin-provider.post*}: remove. * debian/copyright: - Remove plugin references. . [ Martti Pitkänen ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fi.ts: update Finnish translation file. . [ Stefan Baur ] * New upstream release (4.1.2.0): - res/i18n/x2goclient_de.ts: update German translation file. . [ Sébastien Ducoulombier ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_fr.ts: update French translation file. . [ Robert Parts ] * New upstream version (4.1.2.0): - res/i18n/x2goclient_et.ts: update Estonian translation file.

2 1

Bug#1156: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mihai Moldovan 15 Jun '18

15 Jun '18

tag #1156 pending fixed #1156 4.1.2.0 thanks Hello, X2Go issue #1156 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=9c1ca41 The issue will most likely be fixed in src:x2goclient (4.1.2.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 9c1ca414da2698d51213382475b29e6a1d1e9b6a Author: Mihai Moldovan <ionic(a)ionic.de> Date: Fri Jun 15 11:59:05 2018 +0200 src/onmainwindow.cpp: disable private host key permissions check in OpenSSH Server on Windows. Fixes: #1156. diff --git a/debian/changelog b/debian/changelog index e70ea70..078b072 100644 --- a/debian/changelog +++ b/debian/changelog @@ -98,6 +98,8 @@ x2goclient (4.1.2.0-0x2go1) UNRELEASED; urgency=medium - copy-deps-win32.bat: update to 20180615-1 Cygwin bundle, shipping with a further modified OpenSSH Server version at 7.7p1-1-x2go1 and without chgrp. + - src/onmainwindow.cpp: disable private host key permissions check in + OpenSSH Server on Windows. Fixes: #1156. * x2goclient.spec: - Remove plugin references. * debian/rules:

2 1

Bug#1156: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mihai Moldovan 14 Jun '18

14 Jun '18

tag #1156 pending fixed #1156 4.1.2.0 thanks Hello, X2Go issue #1156 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=f22fd19 The issue will most likely be fixed in src:x2goclient (4.1.2.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit f22fd1957a8b16a80588451cc3e0dab26c2d5c8b Author: Mihai Moldovan <ionic(a)ionic.de> Date: Thu Jun 14 04:11:15 2018 +0200 src/onmainwindow.cpp: hook-in chgrp for ~/.x2go/etc on Windows platforms to work around a Cygwin permissions bug. Fixes: #1156. diff --git a/debian/changelog b/debian/changelog index da8f2c1..fe06805 100644 --- a/debian/changelog +++ b/debian/changelog @@ -86,6 +86,8 @@ x2goclient (4.1.2.0-0x2go1) UNRELEASED; urgency=medium Server startup functions. - src/pulsemanager.cpp: use QByteArray's constData () instead of data (), since we'll never modify the data anyway. + - src/onmainwindow.cpp: hook-in chgrp for ~/.x2go/etc on Windows platforms + to work around a Cygwin permissions bug. Fixes: #1156. * x2goclient.spec: - Remove plugin references. * debian/rules:

2 1

stale dated gnupg key
by o1bigtenor 11 Jun '18

11 Jun '18

Greetings I had successfully installed, and have been using x2go for some time (useful software when one has a number of computers to run!). Wanted to install x2goserver on another machine and was running into a number of issues. I believe I have been able to unravel the problem enough to find at least one of the roots of not being able to install even when following the steps published in the wiki. My install was failing when I tried to install the apt-key and by lots of poking and some sideways thinking I have found the issue. Looking in the system where x2go is working happily in /etc/apt/trusted/gpg I find that the key is liked with the following information: pub rsa2048 2011-03-10 [SC] 972F D88F A0BA FB57 8D04 76DF E1F9 5838 5BFE 2B6E uid [ unknown] X2go Debian/Ubuntu Packaging <debian(a)x2go.org> sub rsa2048 2011-03-10 [E] what is interesting is that of the 12 keys listed (likely not that many compared to possibilities) the x2go key is only rsa2048 which might be sufficient but its also listed as 2011-03-10 [E] which I interpret to mean that the key was generated on the date 2011-03-10 but I'm thinking the [E] means that its expired. As renewing the key is not something that I can do as a user I am requesting that someone with the capabilities of modifying the code might please renew and/or refresh the gnupg key and also inform users of the new key (I am assuming that the key would change with renewal/update). Given the rights to do so I would be more than happy to modify the wiki to reflect that new apt-key code. Thanking in advance those doing this - - - (please advise if (including the how) the wiki is to be updated by myself) Dee

2 1

Bug#101: Patch no longer applies
by Mike DePaulo 05 Jun '18

05 Jun '18

I am attempting to do some triaging of bugs with patches. This one no longer applies to master. mike@executor /cygdrive/c/x2gobuilds/x2goclient/src $ patch < /cygdrive/c/Users/Mike.AD/Downloads/0001-Make-application-suspend-session-on-quit.patch patching file onmainwindow.cpp Hunk #1 FAILED at 100. Hunk #2 succeeded at 862 (offset 69 lines). Hunk #3 succeeded at 1141 (offset 77 lines). Hunk #4 FAILED at 1237. Hunk #5 FAILED at 1403. Hunk #6 FAILED at 1429. Hunk #7 succeeded at 5115 (offset 649 lines). 4 out of 7 hunks FAILED -- saving rejects to file onmainwindow.cpp.rej patching file onmainwindow.h Hunk #1 succeeded at 613 (offset 51 lines). Hunk #2 FAILED at 876. Hunk #3 succeeded at 1101 (offset 91 lines). 1 out of 3 hunks FAILED -- saving rejects to file onmainwindow.h.rej

1 0

Bug#1304: x2go client - fails to get ssh key password from agent on kde
by Administrator 04 Jun '18

04 Jun '18

Package: x2goclient Version: 4.1.0.0 $ rpm -qa: x2goclient-4.1.0.0-1.1.x86_64 x2goagent-3.5.0.32-3.1.x86_64 x2gocdmanager-1.1.0.2-1.1.x86_64 x2gousbmount-1.1.0.2-1.1.x86_64 platform opensuse 42.2: $ uname -a Linux epping 4.4.104-18.44-default #1 SMP Thu Jan 4 08:07:55 UTC 2018 (05a9de6) x86_64 x86_64 x86_64 GNU/Linux $ ssh -V OpenSSH_7.2p2, OpenSSL 1.0.2j-fips 26 Sep 2016 What happens: use ssh key with password in session config to connect to x2go server. client asks for key password despite kde ssh agent running and normal ssh using agent to get password. cleint asks for key password each time client resumes session. Both are wrong: as a minimum it should use the local agent to get the key password and connect without request for key password. what should happen: Better is if it does that, and (in both circumstances) uses the key as authentication, i.e. without requiring user password.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev June 2018