- x2go-dev - X2Go ListServ

Bug#744: X2Go issue (in src:nx-libs) has been marked as closed
by X2Go Release Manager 13 Mar '15

13 Mar '15

close #744 thanks Hello, we are very hopeful that X2Go issue #744 reported by you has been resolved in the new release (2:3.5.0.29) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.29) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b3aadd99d26c25ed5f… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.29-0x2go2 Status: RELEASE Date: Fri, 13 Mar 2015 15:50:00 +0100 Fixes: 741 744 Changes: nx-libs (2:3.5.0.29-0x2go2) RELEASED; urgency=medium . [ Mike Gabriel ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix patch header referring to keystrokes.cfg (plural), not keystroke.cfg. * Allow sysadmins to manipulate nxagent's / x2goagent's rgb file by placing it into /etc/nxagent or /etc/x2go. * Provide support for separate .keyboard files for nxagent/x2goagent. * Modify 0101_nxagent_set-rgb-path.full.patch. Allow configurable rgb files. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Let rgb file shipped with x2goagent supersede rgb file shipped with nxagent. FIXME: a better approach would be to decide at runtime if to use /etc/x2go/rgb or /etc/nxagent/rgb. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Allow separate .keyboard files for x2goagent and nxagent. * Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files that get removed during code reduction. * Add 0991_fix-hr-typos.full+lite.patch and 991_fix-hr-typos.full.patch. Fix several typos in upstream code detected by lintian. * Makefile.nx-libs: Don't allow symlinks to point into buildroot. * Makefile.nx-libs: Install man pages via main Makefile. * Add Description: and Author: fields to various patch headers. * Makefile.nx-libs: Run make install for nxproxy first, then create the wrapper script. * Make install-lite rule in Makefile.nx-libs more predictable and not rely on nxproxy/Makefile.in. * Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp uninstallation has to be in uninstall-lite, not in uninstall-full. * Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Fix broken comment paragraph, whitespace fix. . * NX code reduction efforts (from 93Mb to 41Mb): - Drop more unused code in nx-X11/programs/Xserver/hw/. Do this in roll-tarball.sh and in debian/rules alike. - Stop shipping unused / very old xterm code. - Drop nx-X11/programs/Xserver/hw/xfree86 except of four files symlinked to other locations in the source tree at build time. - More source tree size reduction by analyzing what exactly of the Mesa source code in nx-X11/extras/ is used and what not. - Drop more unused folders from tarball release / before .deb package build: . nx-X11/programs/Xserver/miext/shadow/ . nx-X11/programs/Xserver/XpConfig/ . nx-X11/programs/Xserver/Xprint/ - Makefile.nx-libs: Don't install Mesa header files into DESTDIR anymore. - Unify source tree reduction (debian/rules vs. roll-tarball.sh) via file/ folder lists in text files named debian/CODE-REDUCTION_*. - Update 0991_fix-hr-typos.full.patch. Don't patch files that get removed by the NX code reduction effort. - Drop 0604_nx-X11_recent-freetype-API.full.patch. Not used in current build process. - Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files matter to the NX code reduction efforts. - Update 0031_nx-X11_parallel-make.full.patch. Don't patch .original files in NX code tree. - Drop patches: 0017_nx-X11_update-autotools-helper-files.full.patch, 0018_nx-X11_update-libtool-ltmain-script.full.patch, 0019_nx-X11_expat-build-against-system-libxmltok.full.patch. They patch files that are not used at build time. . * Patch system: - Prepend a "0" to every patch file name in debian/patches/. The patch order is now given by a 4 digit ID. Adapt only this changelog stanza to this modification. . * Debian/Ubuntu packaging: + Fully rework the way nx-libs gets packaged for Debian/Ubuntu. + Split up libnx-x11 into individual packages. + Provide dbg:packages for each bin:package containing binaries. + Use Makefile logic to install files into DESTDIR. + Provide dev:packages for each lib:package individually. + Provide nx-x11proto-*-dev packages for all libnx-* libraries. + Install _all_ library files (*.so*) to /usr/lib/<triplet>/, so no extra settings of LD_LIBRARY_PATH is necessary. + Add Multi-Arch support for Debian based distro versions that support Multi-Arch. + Support hardened builds for nxcomp* libraries. + Support hardened builds for nxagent and libNX_*.so files. + Add debian/*.symbols files for shared nx-X11 libraries. + Support .symbols for 64bit and 32bit alike. + Provide CDBS-generated debian/copyright.in file. . * debian/rules: + Backup nxcomp/VERSION file from NoMachine before replacing it with a symlink to debian/VERSION. Recreate the original file when cleaning up. + Fix removal of unused code (that part of the code that we know of so far). (The debian/rules file is a Makefile and Makefiles don't understand shell globbing with curly braces). + Correctly link config files (etc/rgb, etc/nxagent.keyboard, etc/x2goagent.keyboard) before dh_auto_build. + Add to B-D: expat. + Install upstream ChangeLogs into bin:packages. + Remove upstream nx-libs ChangeLog during override_dh_clean. + Use proper quoting on build flag vars (they may contain spaces). . * nx-libs.spec: + The gpg-offline bin:package is not available in our SLE repo. We can do without. + Update .spec file to meet changes in tarball size reduction and restructuring. + Use SONAME based library package naming scheme. + Mention NX technology in every package description. + Install man pages into bin:packages. + Make libNX_X11-6 and libXinerama1 compliant to Shared Library Policy. + Add Obsoletes: fields to all shared libs for marking the non-versioned library package (names) as obsolete. + Don't depend on nx-libs base package with fixed version. + Don't fail if removing *.a files fails due to the files being non-present. + Set PREFIX=%{_prefix} USRLIBDIR=%{_libdir} SHLIBDIR=%{_libdir} at build time. + Assure that BuildRoot: is set. + On SLE 11.x: libX* packages are prefixed with "xorg-x11-". + Install "%{_libdir}/nx/bin" into nxproxy package. . * debian/roll-tarball.sh: + Install etc/ files into etc/ subfolder (rgb, nxagent.keyboard, x2goagent.keyboard). . [ Horst Schirmeier ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix a typo that prevented the /etc/nxagent/keystrokes.cfg file from being parsed. (Fixes: #741). * Add 0321_nxagent_x2go-specific-keystroke-config.full.patch. If nxagent is launched as x2goagent, use X2Go-specific paths for the keystrokes.cfg file. (Fixes: #744). . [ Michael DePaulo ] * Security Fixes: - Rebase loads of X.Org patches (mainly from RHEL-5) against NX. If not all patches from a CVE patch series appear here, then it means that the affected file/code is not used in NX at build time. . - X.Org CVE-2011-2895: 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch - X.Org CVE-2011-4028: 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch - X.Org CVE-2013-4396: 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch - X.Org CVE-2013-6462: 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch - X.Org CVE-2014-0209: 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch - X.Org CVE-2014-0210: 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch - X.Org CVE-2014-0211: 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch - X.Org CVE-2014-8092: 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch - X.Org CVE-2014-8097: 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch - X.Org CVE-2014-8095: 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch - X.Org CVE-2014-8096: 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch - X.Org CVE-2014-8099: 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch - X.Org CVE-2014-8100: 1027-render-check-request-size-before-reading-it-CVE-2014.patch 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch - X.Org CVE-2014-8102: 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch - X.Org CVE-2014-8101: 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch - X.Org CVE-2014-8093: 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch 1036-glx-Integer-overflow-protection-for-non-generated-re.patch - X.Org CVE-2014-8098: 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch 1038-glx-Length-checking-for-non-generated-single-request.patch 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch - X.org CVE-2015-0255 1104-xkb-Check-strings-length-against-request-size.patch . - Security fixes with no assigned CVE: 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch . - Rebase the following patches that are prerequisites for the CVE-2015-0255 patch: 1101-Coverity-844-845-846-Fix-memory-leaks.patch 1102-include-introduce-byte-counting-functions.patch 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch . - Fix FTBFS due to the nxproxy executable already existing under /usr/lib/nx/bin/nx/ . [ Mihai Moldovan ] * Change string "X2go" to "X2Go" where appropriate. * CVE security review: - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch. Use xfree() instead of free() in nx-libs. - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch. Apply correctly on nx-libs 3.6.x. - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch. Human-readable version of "1 MB". - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch. Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c). - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Do proper input validation to fix for CVE-2011-2895.

2 1

Bug#741: X2Go issue (in src:nx-libs) has been marked as closed
by X2Go Release Manager 13 Mar '15

13 Mar '15

close #741 thanks Hello, we are very hopeful that X2Go issue #741 reported by you has been resolved in the new release (2:3.5.0.29) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.29) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b3aadd99d26c25ed5f… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.29-0x2go2 Status: RELEASE Date: Fri, 13 Mar 2015 15:50:00 +0100 Fixes: 741 744 Changes: nx-libs (2:3.5.0.29-0x2go2) RELEASED; urgency=medium . [ Mike Gabriel ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix patch header referring to keystrokes.cfg (plural), not keystroke.cfg. * Allow sysadmins to manipulate nxagent's / x2goagent's rgb file by placing it into /etc/nxagent or /etc/x2go. * Provide support for separate .keyboard files for nxagent/x2goagent. * Modify 0101_nxagent_set-rgb-path.full.patch. Allow configurable rgb files. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Let rgb file shipped with x2goagent supersede rgb file shipped with nxagent. FIXME: a better approach would be to decide at runtime if to use /etc/x2go/rgb or /etc/nxagent/rgb. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Allow separate .keyboard files for x2goagent and nxagent. * Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files that get removed during code reduction. * Add 0991_fix-hr-typos.full+lite.patch and 991_fix-hr-typos.full.patch. Fix several typos in upstream code detected by lintian. * Makefile.nx-libs: Don't allow symlinks to point into buildroot. * Makefile.nx-libs: Install man pages via main Makefile. * Add Description: and Author: fields to various patch headers. * Makefile.nx-libs: Run make install for nxproxy first, then create the wrapper script. * Make install-lite rule in Makefile.nx-libs more predictable and not rely on nxproxy/Makefile.in. * Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp uninstallation has to be in uninstall-lite, not in uninstall-full. * Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Fix broken comment paragraph, whitespace fix. . * NX code reduction efforts (from 93Mb to 41Mb): - Drop more unused code in nx-X11/programs/Xserver/hw/. Do this in roll-tarball.sh and in debian/rules alike. - Stop shipping unused / very old xterm code. - Drop nx-X11/programs/Xserver/hw/xfree86 except of four files symlinked to other locations in the source tree at build time. - More source tree size reduction by analyzing what exactly of the Mesa source code in nx-X11/extras/ is used and what not. - Drop more unused folders from tarball release / before .deb package build: . nx-X11/programs/Xserver/miext/shadow/ . nx-X11/programs/Xserver/XpConfig/ . nx-X11/programs/Xserver/Xprint/ - Makefile.nx-libs: Don't install Mesa header files into DESTDIR anymore. - Unify source tree reduction (debian/rules vs. roll-tarball.sh) via file/ folder lists in text files named debian/CODE-REDUCTION_*. - Update 0991_fix-hr-typos.full.patch. Don't patch files that get removed by the NX code reduction effort. - Drop 0604_nx-X11_recent-freetype-API.full.patch. Not used in current build process. - Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files matter to the NX code reduction efforts. - Update 0031_nx-X11_parallel-make.full.patch. Don't patch .original files in NX code tree. - Drop patches: 0017_nx-X11_update-autotools-helper-files.full.patch, 0018_nx-X11_update-libtool-ltmain-script.full.patch, 0019_nx-X11_expat-build-against-system-libxmltok.full.patch. They patch files that are not used at build time. . * Patch system: - Prepend a "0" to every patch file name in debian/patches/. The patch order is now given by a 4 digit ID. Adapt only this changelog stanza to this modification. . * Debian/Ubuntu packaging: + Fully rework the way nx-libs gets packaged for Debian/Ubuntu. + Split up libnx-x11 into individual packages. + Provide dbg:packages for each bin:package containing binaries. + Use Makefile logic to install files into DESTDIR. + Provide dev:packages for each lib:package individually. + Provide nx-x11proto-*-dev packages for all libnx-* libraries. + Install _all_ library files (*.so*) to /usr/lib/<triplet>/, so no extra settings of LD_LIBRARY_PATH is necessary. + Add Multi-Arch support for Debian based distro versions that support Multi-Arch. + Support hardened builds for nxcomp* libraries. + Support hardened builds for nxagent and libNX_*.so files. + Add debian/*.symbols files for shared nx-X11 libraries. + Support .symbols for 64bit and 32bit alike. + Provide CDBS-generated debian/copyright.in file. . * debian/rules: + Backup nxcomp/VERSION file from NoMachine before replacing it with a symlink to debian/VERSION. Recreate the original file when cleaning up. + Fix removal of unused code (that part of the code that we know of so far). (The debian/rules file is a Makefile and Makefiles don't understand shell globbing with curly braces). + Correctly link config files (etc/rgb, etc/nxagent.keyboard, etc/x2goagent.keyboard) before dh_auto_build. + Add to B-D: expat. + Install upstream ChangeLogs into bin:packages. + Remove upstream nx-libs ChangeLog during override_dh_clean. + Use proper quoting on build flag vars (they may contain spaces). . * nx-libs.spec: + The gpg-offline bin:package is not available in our SLE repo. We can do without. + Update .spec file to meet changes in tarball size reduction and restructuring. + Use SONAME based library package naming scheme. + Mention NX technology in every package description. + Install man pages into bin:packages. + Make libNX_X11-6 and libXinerama1 compliant to Shared Library Policy. + Add Obsoletes: fields to all shared libs for marking the non-versioned library package (names) as obsolete. + Don't depend on nx-libs base package with fixed version. + Don't fail if removing *.a files fails due to the files being non-present. + Set PREFIX=%{_prefix} USRLIBDIR=%{_libdir} SHLIBDIR=%{_libdir} at build time. + Assure that BuildRoot: is set. + On SLE 11.x: libX* packages are prefixed with "xorg-x11-". + Install "%{_libdir}/nx/bin" into nxproxy package. . * debian/roll-tarball.sh: + Install etc/ files into etc/ subfolder (rgb, nxagent.keyboard, x2goagent.keyboard). . [ Horst Schirmeier ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix a typo that prevented the /etc/nxagent/keystrokes.cfg file from being parsed. (Fixes: #741). * Add 0321_nxagent_x2go-specific-keystroke-config.full.patch. If nxagent is launched as x2goagent, use X2Go-specific paths for the keystrokes.cfg file. (Fixes: #744). . [ Michael DePaulo ] * Security Fixes: - Rebase loads of X.Org patches (mainly from RHEL-5) against NX. If not all patches from a CVE patch series appear here, then it means that the affected file/code is not used in NX at build time. . - X.Org CVE-2011-2895: 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch - X.Org CVE-2011-4028: 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch - X.Org CVE-2013-4396: 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch - X.Org CVE-2013-6462: 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch - X.Org CVE-2014-0209: 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch - X.Org CVE-2014-0210: 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch - X.Org CVE-2014-0211: 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch - X.Org CVE-2014-8092: 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch - X.Org CVE-2014-8097: 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch - X.Org CVE-2014-8095: 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch - X.Org CVE-2014-8096: 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch - X.Org CVE-2014-8099: 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch - X.Org CVE-2014-8100: 1027-render-check-request-size-before-reading-it-CVE-2014.patch 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch - X.Org CVE-2014-8102: 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch - X.Org CVE-2014-8101: 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch - X.Org CVE-2014-8093: 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch 1036-glx-Integer-overflow-protection-for-non-generated-re.patch - X.Org CVE-2014-8098: 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch 1038-glx-Length-checking-for-non-generated-single-request.patch 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch - X.org CVE-2015-0255 1104-xkb-Check-strings-length-against-request-size.patch . - Security fixes with no assigned CVE: 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch . - Rebase the following patches that are prerequisites for the CVE-2015-0255 patch: 1101-Coverity-844-845-846-Fix-memory-leaks.patch 1102-include-introduce-byte-counting-functions.patch 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch . - Fix FTBFS due to the nxproxy executable already existing under /usr/lib/nx/bin/nx/ . [ Mihai Moldovan ] * Change string "X2go" to "X2Go" where appropriate. * CVE security review: - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch. Use xfree() instead of free() in nx-libs. - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch. Apply correctly on nx-libs 3.6.x. - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch. Human-readable version of "1 MB". - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch. Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c). - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Do proper input validation to fix for CVE-2011-2895.

2 1

Bug#744: X2Go issue (in src:nx-libs) has been marked as closed
by X2Go Release Manager 13 Mar '15

13 Mar '15

close #744 thanks Hello, we are very hopeful that X2Go issue #744 reported by you has been resolved in the new release (2:3.5.0.29) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.29) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b3aadd99d26c25ed5f… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.29-0x2go2 Status: RELEASE Date: Fri, 13 Mar 2015 15:50:00 +0100 Fixes: 741 744 Changes: nx-libs (2:3.5.0.29-0x2go2) RELEASED; urgency=medium . [ Mike Gabriel ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix patch header referring to keystrokes.cfg (plural), not keystroke.cfg. * Allow sysadmins to manipulate nxagent's / x2goagent's rgb file by placing it into /etc/nxagent or /etc/x2go. * Provide support for separate .keyboard files for nxagent/x2goagent. * Modify 0101_nxagent_set-rgb-path.full.patch. Allow configurable rgb files. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Let rgb file shipped with x2goagent supersede rgb file shipped with nxagent. FIXME: a better approach would be to decide at runtime if to use /etc/x2go/rgb or /etc/nxagent/rgb. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Allow separate .keyboard files for x2goagent and nxagent. * Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files that get removed during code reduction. * Add 0991_fix-hr-typos.full+lite.patch and 991_fix-hr-typos.full.patch. Fix several typos in upstream code detected by lintian. * Makefile.nx-libs: Don't allow symlinks to point into buildroot. * Makefile.nx-libs: Install man pages via main Makefile. * Add Description: and Author: fields to various patch headers. * Makefile.nx-libs: Run make install for nxproxy first, then create the wrapper script. * Make install-lite rule in Makefile.nx-libs more predictable and not rely on nxproxy/Makefile.in. * Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp uninstallation has to be in uninstall-lite, not in uninstall-full. * Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Fix broken comment paragraph, whitespace fix. . * NX code reduction efforts (from 93Mb to 41Mb): - Drop more unused code in nx-X11/programs/Xserver/hw/. Do this in roll-tarball.sh and in debian/rules alike. - Stop shipping unused / very old xterm code. - Drop nx-X11/programs/Xserver/hw/xfree86 except of four files symlinked to other locations in the source tree at build time. - More source tree size reduction by analyzing what exactly of the Mesa source code in nx-X11/extras/ is used and what not. - Drop more unused folders from tarball release / before .deb package build: . nx-X11/programs/Xserver/miext/shadow/ . nx-X11/programs/Xserver/XpConfig/ . nx-X11/programs/Xserver/Xprint/ - Makefile.nx-libs: Don't install Mesa header files into DESTDIR anymore. - Unify source tree reduction (debian/rules vs. roll-tarball.sh) via file/ folder lists in text files named debian/CODE-REDUCTION_*. - Update 0991_fix-hr-typos.full.patch. Don't patch files that get removed by the NX code reduction effort. - Drop 0604_nx-X11_recent-freetype-API.full.patch. Not used in current build process. - Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files matter to the NX code reduction efforts. - Update 0031_nx-X11_parallel-make.full.patch. Don't patch .original files in NX code tree. - Drop patches: 0017_nx-X11_update-autotools-helper-files.full.patch, 0018_nx-X11_update-libtool-ltmain-script.full.patch, 0019_nx-X11_expat-build-against-system-libxmltok.full.patch. They patch files that are not used at build time. . * Patch system: - Prepend a "0" to every patch file name in debian/patches/. The patch order is now given by a 4 digit ID. Adapt only this changelog stanza to this modification. . * Debian/Ubuntu packaging: + Fully rework the way nx-libs gets packaged for Debian/Ubuntu. + Split up libnx-x11 into individual packages. + Provide dbg:packages for each bin:package containing binaries. + Use Makefile logic to install files into DESTDIR. + Provide dev:packages for each lib:package individually. + Provide nx-x11proto-*-dev packages for all libnx-* libraries. + Install _all_ library files (*.so*) to /usr/lib/<triplet>/, so no extra settings of LD_LIBRARY_PATH is necessary. + Add Multi-Arch support for Debian based distro versions that support Multi-Arch. + Support hardened builds for nxcomp* libraries. + Support hardened builds for nxagent and libNX_*.so files. + Add debian/*.symbols files for shared nx-X11 libraries. + Support .symbols for 64bit and 32bit alike. + Provide CDBS-generated debian/copyright.in file. . * debian/rules: + Backup nxcomp/VERSION file from NoMachine before replacing it with a symlink to debian/VERSION. Recreate the original file when cleaning up. + Fix removal of unused code (that part of the code that we know of so far). (The debian/rules file is a Makefile and Makefiles don't understand shell globbing with curly braces). + Correctly link config files (etc/rgb, etc/nxagent.keyboard, etc/x2goagent.keyboard) before dh_auto_build. + Add to B-D: expat. + Install upstream ChangeLogs into bin:packages. + Remove upstream nx-libs ChangeLog during override_dh_clean. + Use proper quoting on build flag vars (they may contain spaces). . * nx-libs.spec: + The gpg-offline bin:package is not available in our SLE repo. We can do without. + Update .spec file to meet changes in tarball size reduction and restructuring. + Use SONAME based library package naming scheme. + Mention NX technology in every package description. + Install man pages into bin:packages. + Make libNX_X11-6 and libXinerama1 compliant to Shared Library Policy. + Add Obsoletes: fields to all shared libs for marking the non-versioned library package (names) as obsolete. + Don't depend on nx-libs base package with fixed version. + Don't fail if removing *.a files fails due to the files being non-present. + Set PREFIX=%{_prefix} USRLIBDIR=%{_libdir} SHLIBDIR=%{_libdir} at build time. + Assure that BuildRoot: is set. + On SLE 11.x: libX* packages are prefixed with "xorg-x11-". + Install "%{_libdir}/nx/bin" into nxproxy package. . * debian/roll-tarball.sh: + Install etc/ files into etc/ subfolder (rgb, nxagent.keyboard, x2goagent.keyboard). . [ Horst Schirmeier ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix a typo that prevented the /etc/nxagent/keystrokes.cfg file from being parsed. (Fixes: #741). * Add 0321_nxagent_x2go-specific-keystroke-config.full.patch. If nxagent is launched as x2goagent, use X2Go-specific paths for the keystrokes.cfg file. (Fixes: #744). . [ Michael DePaulo ] * Security Fixes: - Rebase loads of X.Org patches (mainly from RHEL-5) against NX. If not all patches from a CVE patch series appear here, then it means that the affected file/code is not used in NX at build time. . - X.Org CVE-2011-2895: 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch - X.Org CVE-2011-4028: 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch - X.Org CVE-2013-4396: 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch - X.Org CVE-2013-6462: 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch - X.Org CVE-2014-0209: 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch - X.Org CVE-2014-0210: 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch - X.Org CVE-2014-0211: 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch - X.Org CVE-2014-8092: 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch - X.Org CVE-2014-8097: 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch - X.Org CVE-2014-8095: 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch - X.Org CVE-2014-8096: 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch - X.Org CVE-2014-8099: 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch - X.Org CVE-2014-8100: 1027-render-check-request-size-before-reading-it-CVE-2014.patch 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch - X.Org CVE-2014-8102: 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch - X.Org CVE-2014-8101: 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch - X.Org CVE-2014-8093: 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch 1036-glx-Integer-overflow-protection-for-non-generated-re.patch - X.Org CVE-2014-8098: 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch 1038-glx-Length-checking-for-non-generated-single-request.patch 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch - X.org CVE-2015-0255 1104-xkb-Check-strings-length-against-request-size.patch . - Security fixes with no assigned CVE: 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch . - Rebase the following patches that are prerequisites for the CVE-2015-0255 patch: 1101-Coverity-844-845-846-Fix-memory-leaks.patch 1102-include-introduce-byte-counting-functions.patch 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch . - Fix FTBFS due to the nxproxy executable already existing under /usr/lib/nx/bin/nx/ . [ Mihai Moldovan ] * Change string "X2go" to "X2Go" where appropriate. * CVE security review: - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch. Use xfree() instead of free() in nx-libs. - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch. Apply correctly on nx-libs 3.6.x. - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch. Human-readable version of "1 MB". - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch. Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c). - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Do proper input validation to fix for CVE-2011-2895.

2 1

Bug#741: X2Go issue (in src:nx-libs) has been marked as closed
by X2Go Release Manager 13 Mar '15

13 Mar '15

close #741 thanks Hello, we are very hopeful that X2Go issue #741 reported by you has been resolved in the new release (2:3.5.0.29) of the X2Go source project »src:nx-libs«. You can view the complete changelog entry of src:nx-libs (2:3.5.0.29) below, and you can use the following link to view all the code changes between this and the last release of src:nx-libs. http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b3aadd99d26c25ed5f… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:nx-libs. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:nx-libs Version: 2:3.5.0.29-0x2go2 Status: RELEASE Date: Fri, 13 Mar 2015 15:50:00 +0100 Fixes: 741 744 Changes: nx-libs (2:3.5.0.29-0x2go2) RELEASED; urgency=medium . [ Mike Gabriel ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix patch header referring to keystrokes.cfg (plural), not keystroke.cfg. * Allow sysadmins to manipulate nxagent's / x2goagent's rgb file by placing it into /etc/nxagent or /etc/x2go. * Provide support for separate .keyboard files for nxagent/x2goagent. * Modify 0101_nxagent_set-rgb-path.full.patch. Allow configurable rgb files. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Let rgb file shipped with x2goagent supersede rgb file shipped with nxagent. FIXME: a better approach would be to decide at runtime if to use /etc/x2go/rgb or /etc/nxagent/rgb. * Extend 0999_nxagent_unbrand-nxagent-brand-x2goagent.full.patch. Allow separate .keyboard files for x2goagent and nxagent. * Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files that get removed during code reduction. * Add 0991_fix-hr-typos.full+lite.patch and 991_fix-hr-typos.full.patch. Fix several typos in upstream code detected by lintian. * Makefile.nx-libs: Don't allow symlinks to point into buildroot. * Makefile.nx-libs: Install man pages via main Makefile. * Add Description: and Author: fields to various patch headers. * Makefile.nx-libs: Run make install for nxproxy first, then create the wrapper script. * Make install-lite rule in Makefile.nx-libs more predictable and not rely on nxproxy/Makefile.in. * Makefile.nx-libs: Fix uninstall-lite rule. The nxproxy and nxcomp uninstallation has to be in uninstall-lite, not in uninstall-full. * Update 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Fix broken comment paragraph, whitespace fix. . * NX code reduction efforts (from 93Mb to 41Mb): - Drop more unused code in nx-X11/programs/Xserver/hw/. Do this in roll-tarball.sh and in debian/rules alike. - Stop shipping unused / very old xterm code. - Drop nx-X11/programs/Xserver/hw/xfree86 except of four files symlinked to other locations in the source tree at build time. - More source tree size reduction by analyzing what exactly of the Mesa source code in nx-X11/extras/ is used and what not. - Drop more unused folders from tarball release / before .deb package build: . nx-X11/programs/Xserver/miext/shadow/ . nx-X11/programs/Xserver/XpConfig/ . nx-X11/programs/Xserver/Xprint/ - Makefile.nx-libs: Don't install Mesa header files into DESTDIR anymore. - Unify source tree reduction (debian/rules vs. roll-tarball.sh) via file/ folder lists in text files named debian/CODE-REDUCTION_*. - Update 0991_fix-hr-typos.full.patch. Don't patch files that get removed by the NX code reduction effort. - Drop 0604_nx-X11_recent-freetype-API.full.patch. Not used in current build process. - Update 0600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch. Don't patch files matter to the NX code reduction efforts. - Update 0031_nx-X11_parallel-make.full.patch. Don't patch .original files in NX code tree. - Drop patches: 0017_nx-X11_update-autotools-helper-files.full.patch, 0018_nx-X11_update-libtool-ltmain-script.full.patch, 0019_nx-X11_expat-build-against-system-libxmltok.full.patch. They patch files that are not used at build time. . * Patch system: - Prepend a "0" to every patch file name in debian/patches/. The patch order is now given by a 4 digit ID. Adapt only this changelog stanza to this modification. . * Debian/Ubuntu packaging: + Fully rework the way nx-libs gets packaged for Debian/Ubuntu. + Split up libnx-x11 into individual packages. + Provide dbg:packages for each bin:package containing binaries. + Use Makefile logic to install files into DESTDIR. + Provide dev:packages for each lib:package individually. + Provide nx-x11proto-*-dev packages for all libnx-* libraries. + Install _all_ library files (*.so*) to /usr/lib/<triplet>/, so no extra settings of LD_LIBRARY_PATH is necessary. + Add Multi-Arch support for Debian based distro versions that support Multi-Arch. + Support hardened builds for nxcomp* libraries. + Support hardened builds for nxagent and libNX_*.so files. + Add debian/*.symbols files for shared nx-X11 libraries. + Support .symbols for 64bit and 32bit alike. + Provide CDBS-generated debian/copyright.in file. . * debian/rules: + Backup nxcomp/VERSION file from NoMachine before replacing it with a symlink to debian/VERSION. Recreate the original file when cleaning up. + Fix removal of unused code (that part of the code that we know of so far). (The debian/rules file is a Makefile and Makefiles don't understand shell globbing with curly braces). + Correctly link config files (etc/rgb, etc/nxagent.keyboard, etc/x2goagent.keyboard) before dh_auto_build. + Add to B-D: expat. + Install upstream ChangeLogs into bin:packages. + Remove upstream nx-libs ChangeLog during override_dh_clean. + Use proper quoting on build flag vars (they may contain spaces). . * nx-libs.spec: + The gpg-offline bin:package is not available in our SLE repo. We can do without. + Update .spec file to meet changes in tarball size reduction and restructuring. + Use SONAME based library package naming scheme. + Mention NX technology in every package description. + Install man pages into bin:packages. + Make libNX_X11-6 and libXinerama1 compliant to Shared Library Policy. + Add Obsoletes: fields to all shared libs for marking the non-versioned library package (names) as obsolete. + Don't depend on nx-libs base package with fixed version. + Don't fail if removing *.a files fails due to the files being non-present. + Set PREFIX=%{_prefix} USRLIBDIR=%{_libdir} SHLIBDIR=%{_libdir} at build time. + Assure that BuildRoot: is set. + On SLE 11.x: libX* packages are prefixed with "xorg-x11-". + Install "%{_libdir}/nx/bin" into nxproxy package. . * debian/roll-tarball.sh: + Install etc/ files into etc/ subfolder (rgb, nxagent.keyboard, x2goagent.keyboard). . [ Horst Schirmeier ] * Update 0320_nxagent_configurable-keystrokes.full.patch. Fix a typo that prevented the /etc/nxagent/keystrokes.cfg file from being parsed. (Fixes: #741). * Add 0321_nxagent_x2go-specific-keystroke-config.full.patch. If nxagent is launched as x2goagent, use X2Go-specific paths for the keystrokes.cfg file. (Fixes: #744). . [ Michael DePaulo ] * Security Fixes: - Rebase loads of X.Org patches (mainly from RHEL-5) against NX. If not all patches from a CVE patch series appear here, then it means that the affected file/code is not used in NX at build time. . - X.Org CVE-2011-2895: 1001-LZW-decompress-fix-for-CVE-2011-2895-From-xorg-lib-X.patch - X.Org CVE-2011-4028: 1002-Fix-CVE-2011-4028-File-disclosure-vulnerability.-ups.patch - X.Org CVE-2013-4396: 1003-Avoid-use-after-free-in-dix-dixfonts.c-doImageText-C.patch - X.Org CVE-2013-6462: 1004-CVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.patch - X.Org CVE-2014-0209: 1005-CVE-2014-0209-integer-overflow-of-realloc-size-in-Fo.patch 1006-CVE-2014-0209-integer-overflow-of-realloc-size-in-le.patch - X.Org CVE-2014-0210: 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch 1009-CVE-2014-0210-unvalidated-lengths-when-reading-repli.patch 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch 1014-CVE-2014-0210-unvalidated-length-fields-in-fs_read_e.patch 1015-CVE-2014-0210-unvalidated-length-fields-in-fs_read_g.patch 1016-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch 1017-CVE-2014-0210-unvalidated-length-fields-in-fs_read_l.patch - X.Org CVE-2014-0211: 1010-CVE-2014-0211-Integer-overflow-in-fs_get_reply-_fs_s.patch 1012-CVE-2014-0211-integer-overflow-in-fs_read_extent_inf.patch 1013-CVE-2014-0211-integer-overflow-in-fs_alloc_glyphs-fr.patch 1018-unchecked-malloc-may-allow-unauthed-client-to-crash-.patch - X.Org CVE-2014-8092: 1019-dix-integer-overflow-in-ProcPutImage-CVE-2014-8092-1.patch 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch 1021-dix-integer-overflow-in-RegionSizeof-CVE-2014-8092-3.patch 1022-dix-integer-overflow-in-REQUEST_FIXED_SIZE-CVE-2014-.patch - X.Org CVE-2014-8097: 1023-dbe-unvalidated-lengths-in-DbeSwapBuffers-calls-CVE-.patch - X.Org CVE-2014-8095: 1024-Xi-unvalidated-lengths-in-Xinput-extension-CVE-2014-.patch - X.Org CVE-2014-8096: 1025-xcmisc-unvalidated-length-in-SProcXCMiscGetXIDList-C.patch - X.Org CVE-2014-8099: 1026-Xv-unvalidated-lengths-in-XVideo-extension-swapped-p.patch - X.Org CVE-2014-8100: 1027-render-check-request-size-before-reading-it-CVE-2014.patch 1028-render-unvalidated-lengths-in-Render-extn.-swapped-p.patch - X.Org CVE-2014-8102: 1029-xfixes-unvalidated-length-in-SProcXFixesSelectSelect.patch - X.Org CVE-2014-8101: 1030-randr-unvalidated-lengths-in-RandR-extension-swapped.patch - X.Org CVE-2014-8093: 1031-glx-Be-more-paranoid-about-variable-length-requests-.patch 1032-glx-Be-more-strict-about-rejecting-invalid-image-siz.patch 1033-glx-Additional-paranoia-in-__glXGetAnswerBuffer-__GL.patch 1034-glx-Add-safe_-add-mul-pad-v3-CVE-2014-8093-4-6-v4.patch 1036-glx-Integer-overflow-protection-for-non-generated-re.patch - X.Org CVE-2014-8098: 1035-glx-Length-checking-for-GLXRender-requests-v2-CVE-20.patch 1037-glx-Top-level-length-checking-for-swapped-VendorPriv.patch 1038-glx-Length-checking-for-non-generated-single-request.patch 1039-glx-Length-checking-for-RenderLarge-requests-v2-CVE-.patch 1040-glx-Pass-remaining-request-length-into-varsize-v2-CV.patch - X.org CVE-2015-0255 1104-xkb-Check-strings-length-against-request-size.patch . - Security fixes with no assigned CVE: 1008-Don-t-crash-when-we-receive-an-FS_Error-from-the-fon.patch . - Rebase the following patches that are prerequisites for the CVE-2015-0255 patch: 1101-Coverity-844-845-846-Fix-memory-leaks.patch 1102-include-introduce-byte-counting-functions.patch 1103-xkb-Don-t-swap-XkbSetGeometry-data-in-the-input-buff.patch . - Fix FTBFS due to the nxproxy executable already existing under /usr/lib/nx/bin/nx/ . [ Mihai Moldovan ] * Change string "X2go" to "X2Go" where appropriate. * CVE security review: - Update 1007-CVE-2014-0210-unvalidated-length-in-_fs_recv_conn_se.patch. Use xfree() instead of free() in nx-libs. - Update 1011-CVE-2014-0210-unvalidated-length-fields-in-fs_read_q.patch. Apply correctly on nx-libs 3.6.x. - Update 1020-dix-integer-overflow-in-GetHosts-CVE-2014-8092-2-4.patch. Human-readable version of "1 MB". - Add 1041-nx-X11-lib-font-fc-fserve.c-initialize-remaining-buf.patch. Initialize remaining bufleft variables (nx-X11/lib/font/fc/fserve.c). - Add 1042-Do-proper-input-validation-to-fix-for-CVE-2011-2895.patch. Do proper input validation to fix for CVE-2011-2895.

2 1

support for all-numerical user ids
by ENRICO BERTOCCHI 12 Mar '15

12 Mar '15

Dear sirs, I installed x2goserver on a debian wheezy machine dedicated to teaching activities. The usernames retrieved from our university LDAP server (on which I have no authority) are allowed to be fully numerical, and most students have fully numerical uids. In order to have a working x2goserver, I changed the regex expression in the sub sanitizer, "x2gosid" section, of /usr/lib/x2go/x2goutils.pm (line 46) /usr/lib/x2go/x2gosqlitewrapper.pl (line 67) from if ($string =~ /^([a-zA-Z\_][a-zA-Z0-9\_\-\.\@]{0,47}[\$]?)\-[...etc...] to if ($string =~ /^([a-zA-Z\_0-9][a-zA-Z0-9\_\-\.\@]{0,47}[\$]?)\-[...etc...] Being a mechanical engineer with limited developing experience and no perl knowledge, I can't state if such a change has undesired side effects. Could you check if such change would be acceptable? The only justification of our LDAP managers is probably that the POSIX standard allows usernames beginning with numbers (see e.g. discussion http://serverfault.com/questions/73084/what-characters-should-i-use-or-not-… ) Thanking for the kind attention -- Enrico Bertocchi

1 0

Bug#797: xinamera extension is broken after update
by Fernando Pedemonte 12 Mar '15

12 Mar '15

Hi all, I was having this problem also, and after some debugging I was able to trace the problem to a function in the file onmainwindow.cpp at the x2goclient package. Enabling the debug on the client I saw at the step of creating the xinerama.conf file inside $HOME/.x2go/xxxxxx/ directory the following: x2go-DEBUG-../sshmasterconnection.cpp:1469> executing remote: "sh -c 'echo X2GODATABEGIN:38317d7e-972d-417f-9745-ef9cb09d7e35; PATH=/usr/local/bin:/usr/bin:/bin export DISPLAY=:50;printf '1600 0 1600 900\\n0 0 1600 900' > $HOME/.x2go/C-fpedemonte-50-1426195616_stDXFCE_dp24/xinerama.conf; echo X2GODATAEND:38317d7e-972d-417f-9745-ef9cb09d7e35;'" As you can see, the "\n" is not escaped correctly. What I did was to modify the following line of code inside onmainwindow.cpp line 10212 QString cmd="export DISPLAY=:"+resumingSession.display+";printf '"+screens.join("\\\\n")+"' > $HOME/.x2go/C-"+ resumingSession.sessionId+"/xinerama.conf"; To: QString cmd="export DISPLAY=:"+resumingSession.display+";printf \""+screens.join("\\n")+"\" > $HOME/.x2go/C-"+ resumingSession.sessionId+"/xinerama.conf"; After this modification, xinerama is working again. Take note that I also replaced the single quote by double quote and escaped them. Without this modification the printf command was failing to create the xinerama.conf file. Thanks for this excelent piece of software Best Regards Fernando D. Pedemonte Seguridad Informática SINTyS Sistema de Identificación Nacional Tributario y Social Consejo Nacional de Coordinación de Políticas Sociales Presidencia de la Nación Julio A. Roca 782- Piso 5 Ciudad Autónoma de Bs. As. Tel: (54 11) 43708778 int.8788 fpedemonte(a)sintys.gov.ar ----------- NOTA DE RESPONSABILIDAD: ----------------------------------- Este mensaje proviene de Internet, tome los recaudos necesarios en su manejo. El contenido del presente mensaje y sus adjuntos es privado, estrictamente confidencial y exclusivo para su destinatario, pudiendo contener información protegida por normas legales y de secreto profesional. Bajo ninguna circunstancia su contenido puede ser transmitido o revelado a terceros ni divulgado en forma alguna. En consecuencia de haberlo recibido por error, solicitamos contactar al remitente y eliminarlo de su sistema. ------------------------------------------------------------------------

1 0

Bug#804: slot argument mismatch in ONMainWindow::slotTunnelOk causes hang during connect
by Will Wagner 12 Mar '15

12 Mar '15

Package: x2goclient Version: 4.0.3.2 When trying to connect to certain servers I get 'Object::connect: No such slot ONMainWindow::slotTunnelOk()' in the debugging output of X2Go Client for Windows 4.0.3.2. The application hangs without ever connecting. From looking at the code in ONMainWindow::slotTunnelOk() it has a check to see if winServersReady is true and if not it uses QTimer::singleShot to retry 100mS later. However the slot connection has an argument mismatch and so slotTunnelOk is never called again and this leads to the hang. The full debug output is: x2go-INFO-1> "Starting x2goclient..." x2go-WARNING-1> "Can't load translator: :/x2goclient_en_gb" x2go-WARNING-2> "Can't load translator: :/qt_en_GB" x2go-DEBUG-onmainwindow.cpp:1208> Removing apps from tray x2go-DEBUG-onmainwindow.cpp:1176> Plugging apps in tray. x2go-DEBUG-onmainwindow.cpp:9817> Getting Xorg settings. x2go-INFO-3> "Started x2goclient." x2go-DEBUG-onmainwindow.cpp:495> "$HOME=C:/Users/willw" x2go-DEBUG-onmainwindow.cpp:2123> Reading 4 sessions from config file. x2go-DEBUG-onmainwindow.cpp:9543> Starting win servers... x2go-DEBUG-onmainwindow.cpp:9895> "C:/Users/willw/.x2go/etc/sshd_config created." x2go-DEBUG-onmainwindow.cpp:9312> got localhost x2go-DEBUG-onmainwindow.cpp:9334> Port is free: 7022 x2go-DEBUG-onmainwindow.cpp:9951> Creating desktop: x2go_willw x2go-DEBUG-onmainwindow.cpp:1208> Removing apps from tray x2go-INFO-8> "Starting connection to server: 172.20.0.2:22" x2go-DEBUG-onmainwindow.cpp:2702> Start new ssh connection to server:"172.20.0.2":"22" krbLogin: false x2go-DEBUG-sshmasterconnection.cpp:202> starting ssh connection without kerberos authentication x2go-DEBUG-sshmasterconnection.cpp:206> SshMasterConnection, instance SshMasterConnection(0x15a8d58) created x2go-DEBUG-sshmasterconnection.cpp:442> SshMasterConnection, instance SshMasterConnection(0x15a8d58) entering thread x2go-DEBUG-sshmasterconnection.cpp:478> libSsh not inited yet, initting x2go-DEBUG-sshmasterconnection.cpp:522> setting SSH DIR to "C:/Users/willw/ssh" x2go-DEBUG-sshmasterconnection.cpp:789> cserverAuth x2go-DEBUG-sshmasterconnection.cpp:804> state: 1 x2go-DEBUG-sshmasterconnection.cpp:640> setting SSH DIR to "C:/Users/willw/ssh" x2go-DEBUG-sshmasterconnection.cpp:963> Password authentication x2go-DEBUG-sshmasterconnection.cpp:654> user auth OK x2go-DEBUG-onmainwindow.cpp:2797> SSH connection established. x2go-DEBUG-onmainwindow.cpp:3060> Continue normal x2go session x2go-DEBUG-sshprocess.cpp:189> executing remote command via SshProcess object (0): "export HOSTNAME && x2golistsessions" x2go-DEBUG-sshmasterconnection.cpp:1434> creating new channel x2go-DEBUG-sshmasterconnection.cpp:1438> new channel:0x37196b0 x2go-DEBUG-sshmasterconnection.cpp:1469> executing remote: "sh -c 'echo X2GODATABEGIN:819aa939-7479-4d86-bbeb-8c9e041031a8; PATH=/usr/local/bin:/usr/bin:/bin export HOSTNAME && x2golistsessions; echo X2GODATAEND:819aa939-7479-4d86-bbeb-8c9e041031a8;'" x2go-DEBUG-sshmasterconnection.cpp:1492> new exec channel created x2go-DEBUG-sshmasterconnection.cpp:1541> EOF ON CHANNEL 0x37196b0 (SshProcess: 0) x2go-DEBUG-sshmasterconnection.cpp:1664> eof sent x2go-DEBUG-sshmasterconnection.cpp:1668> channel closed x2go-DEBUG-sshprocess.cpp:449> ssh finished: true - "39358|willw-50-1425634735_stDXFCE_dp32|50|waldorf2|S|2015-03-06T09:38:55|b7d8a7118d17318a0f0f5d435a497f0a|172.20.1.8|30001|30002|2015-03-06T09:41:52|willw|267|30003| " (0). x2go-DEBUG-onmainwindow.cpp:3404> "39358|willw-50-1425634735_stDXFCE_dp32|50|waldorf2|S|2015-03-06T09:38:55|b7d8a7118d17318a0f0f5d435a497f0a|172.20.1.8|30001|30002|2015-03-06T09:41:52|willw|267|30003| " x2go-DEBUG-onmainwindow.cpp:1208> Removing apps from tray x2go-DEBUG-onmainwindow.cpp:1208> Removing apps from tray x2go-DEBUG-onmainwindow.cpp:9312> got localhost x2go-DEBUG-onmainwindow.cpp:9334> Port is free: 6000 x2go-DEBUG-onmainwindow.cpp:9400> using internal X: true x2go-DEBUG-onmainwindow.cpp:9423> WxH:"1024"x"768" x2go-DEBUG-onmainwindow.cpp:9428> "-multiwindow -notrayicon -clipboard" x2go-DEBUG-onmainwindow.cpp:9465> Running "C:/Program Files (x86)/x2goclient\vcxsrv\vcxsrv.exe" "-multiwindow -notrayicon -clipboard :0" x2go-DEBUG-sshprocess.cpp:189> executing remote command via SshProcess object (1): "x2goresume-session willw-50-1425634735_stDXFCE_dp32 1024x768 adsl 16m-jpeg-9 us auto 1 both" x2go-DEBUG-sshmasterconnection.cpp:1434> creating new channel x2go-DEBUG-sshmasterconnection.cpp:1438> new channel:0x37197b8 x2go-DEBUG-sshmasterconnection.cpp:1469> executing remote: "sh -c 'echo X2GODATABEGIN:67634731-3df8-4974-af0a-1f3568ca4bdb; PATH=/usr/local/bin:/usr/bin:/bin x2goresume-session willw-50-1425634735_stDXFCE_dp32 1024x768 adsl 16m-jpeg-9 us auto 1 both; echo X2GODATAEND:67634731-3df8-4974-af0a-1f3568ca4bdb;'" x2go-DEBUG-sshmasterconnection.cpp:1492> new exec channel created x2go-DEBUG-sshmasterconnection.cpp:1596> EOF ON CHANNEL 0x37197b8 (SshProcess: 1) x2go-DEBUG-sshmasterconnection.cpp:1664> eof sent x2go-DEBUG-sshmasterconnection.cpp:1668> channel closed x2go-DEBUG-sshprocess.cpp:449> ssh finished: true - "gr_port=30001 sound_port=30002 fs_port=30003 " (1). x2go-DEBUG-onmainwindow.cpp:4727> Agent output: "gr_port=30001 sound_port=30002 fs_port=30003 " x2go-DEBUG-onmainwindow.cpp:4905> New gr_port: "30001" x2go-DEBUG-onmainwindow.cpp:4912> New sound_port: "30002" x2go-DEBUG-onmainwindow.cpp:4919> New fs_port: "30003" x2go-DEBUG-onmainwindow.cpp:9312> got localhost x2go-DEBUG-onmainwindow.cpp:9334> Port is free: 31001 x2go-DEBUG-sshprocess.cpp:294> Starting tunnel via SshProcess object (2): "localhost":30001 -> "localhost":31001 x2go-DEBUG-onmainwindow.cpp:5172> Waiting for win-servers. Object::connect: No such slot ONMainWindow::slotTunnelOk() x2go-DEBUG-sshprocess.cpp:157> Direct tunnel: waiting for connections on "localhost":31001 x2go-DEBUG-onmainwindow.cpp:9312> got localhost x2go-DEBUG-onmainwindow.cpp:9340> Port already used: 6000 x2go-DEBUG-onmainwindow.cpp:9494> X is started. x2go-DEBUG-onmainwindow.cpp:9861> All winservers are started.

2 9

Bug#792: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mihai Moldovan 12 Mar '15

12 Mar '15

tag #792 pending fixed #792 4.0.4.0 thanks Hello, X2Go issue #792 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=551078c The issue will most likely be fixed in src:x2goclient (4.0.4.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 551078ce72b56157539830978348c06415cb30eb Author: Mihai Moldovan <ionic(a)ionic.de> Date: Thu Mar 12 03:34:38 2015 +0100 configdialog.cpp: - Reformat code. - Add MacPorts and XQuartz references URL's and installation instructions - Don't show outdated version warning when no XQuartz server is installed. Fixes: #792. diff --git a/debian/changelog b/debian/changelog index 778c7a8..ea8e563 100644 --- a/debian/changelog +++ b/debian/changelog @@ -207,6 +207,9 @@ x2goclient (4.0.4.0-0x2go1) UNRELEASED; urgency=low (missed legacy resource URI wrapper call.) - configdialog.cpp: update XQuartz outdated version info message and links. Add MacPorts reference. + - configdialog.cpp: reformat code, add MacPorts and XQuartz references, + URL's and installation instructions, don't show outdated version warning + when no XQuartz server is installed. Fixes: #792. -- X2Go Release Manager <git-admin(a)x2go.org> Thu, 19 Feb 2015 13:25:28 +0100

2 1

Bug#812: x2gogetapps should ignore NoDisplay=true desktop application entries
by Jason Alavaliant 11 Mar '15

11 Mar '15

Package: x2goserver Version: 4.0.1.19 Tags: patch Currently the x2gogetapps command prints out all .desktop application files irrespective of if they have the value NoDisplay=true set in the file or not. This results in the hosted applications list becoming filled with entries that weren't intended to be listed in an application menu normally. For example on my system I have; /usr/share/applications/kde4/okularApplication_comicbook.desktop /usr/share/applications/kde4/okularApplication_ooo.desktop /usr/share/applications/kde4/okularApplication_dvi.desktop /usr/share/applications/kde4/okularApplication_pdf.desktop /usr/share/applications/kde4/okularApplication_fax.desktop /usr/share/applications/kde4/okularApplication_plucker.desktop /usr/share/applications/kde4/okularApplication_fb.desktop /usr/share/applications/kde4/okularApplication_txt.desktop /usr/share/applications/kde4/okularApplication_ghostview.desktop /usr/share/applications/kde4/okularApplication_xps.desktop /usr/share/applications/kde4/okularApplication_kimgio.desktop /usr/share/applications/kde4/okular.desktop /usr/share/applications/kde4/okularApplication_mobi.desktop All of them except okular.desktop have NoDisplay=true set in the file, a normal desktop environment menu has one entry for okular shown since it doesn't list all of those other entries. The x2go application list currently has 13 entries for okular since it displays every single one of the entries. The attached patch updates the x2gogetapps command to check the file to see if NoDisplay=true is set and if so doesn't print out the contents of that file removing all the duplicates and other entries not intended to be listed in a normal application launch menu. Thanks Jason

2 2

Bug#814: Properly starting xubuntu (and others) session in Ubuntu
by Hrvoje Habjanić 10 Mar '15

10 Mar '15

Package: x2goserver-xsession Version: 4.0.1.19-0~1062~ubuntu14.04.1 Hi. It seems that ubuntu requires some additional stuff to be started, to successfully fork X virtual session. The most notable is calling of init script with "--user" argument. Scripts used by /etc/X11/Xsession do most of the stuff ok, and are used by GUI launchers (ie. lightdm). Unfortunately, it requires some additional environment variables to work properly. In most cases, it seems that DESKTOP_SESSION is the most important one. Following does script properly starts xubuntu session, and is the same as started from lightdm: -------[snip]------- PATH=$PATH:/sbin export DESKTOP_SESSION=xubuntu exec /etc/X11/Xsession 'env XAUTHORITY=/home/'$LOGNAME'/.Xauthority /usr/bin/xfce4-session' -------[snip]------- It is enough to put this somewhere on OS, and set it up as script to be started when session start via x2gosession GUI. List of possible values in "DESKTOP_SESSION" is available in /etc/upstart-xsessions. It would be nice if you could put this information somewhere on the wiki, so other users can use it to properly start session(s). Regards, H.

1 0

Bug#813: Performance drop using large virtual screen
by Hrvoje Habjanić 10 Mar '15

10 Mar '15

Package: x2goserver Version: 4.0.1.19-0~1062~ubuntu14.04.1 Hi. I noticed that using large screens (bigger than 800x600) causes x2go to start slowing down. Especially problematic are full-screen switches, for example when you switch from one virtual screen to another, inside of x2go virtual screen. This slow down is experienced as sudden session freeze, depending on screen size, it can stall for up to few seconds. After some time this becomes really annoying ... This is not influenced by switching to different encoding or line speed in GUI. Eventually i did track down to cache sizes. In /usr/bin/x2gostartagent file there is fixed cache size: "cache=8M,disk=32M". Increasing this cache size completely removes this freeze, and also significantly reduces session bandwidth! For example, with session 1680x1050, using 16bit RLE, changing cache to "64M" bandwidth drops from 3-4Mbit/s down to ~200kbit/s! I also noticed better responsiveness when using "disk=0". So, it seems that default settings (cache=8M,disk=32M) are maybe too small for todays use with lager virtual screens, and this should be increased. I would suggest using at least "cache=64M" as default. Also, it would be nice to add a possibility to change those values in a nice way, since directly editing the script is more like a hack. Also, when script is updated, changes are lost. Regards, H.

1 0

Re: [X2Go-Dev] Bug#800: $X2GO_CLIENT not set
by Mihai Moldovan 10 Mar '15

10 Mar '15

On 09.03.2015 04:06 PM, Julius K wrote: > 2015-03-03 14:13 GMT+01:00 Mihai Moldovan <ionic(a)ionic.de > <mailto:ionic@ionic.de>>: > > On 01.03.2015 02:14 PM, Julius K wrote: > > $ x2gostartagent > > [Error Message] > > > > I'm on Linux Miant 17 Qiana with the x2go/stable ppa. > > [...] > > x2gostartagent is not meant to be started manually, but only via > x2goclient or pyhoca-*. Thus, the behavior shown is correct. > > > Ooh, I'm really sorry for this, I thought I have to start the server > manually but it starts automatically after installation, right? I'll be adding back the list, because this may be of interest for other people, too. X2Go Server is not using a daemon for its normal mode of operation, so there's nothing "started" (neither automatically nor manually) after installation. The init script that is automatically is merely running "x2gocleansessions" to get rid of stale/disconnected/terminated sessions. (But creating sessions will still work even with this disabled. You just may have a mess on your hands afterwards...) Every session is started by X2Go Client (or PyHoca-*) via SSH. Both launch x2gostartagent via the SSH connection to the remote server *when creating a new session*. Thus, once you install x2goserver, it's ready to use (minus special features which come in via, e.g., x2goserver-xsession.) > What is the real problem at hand? > > > Now I try to connect from a windows machine to Linux, but it doesn't work. > I checked, ssh works. > When I connect, sometimes it gives an error message like this: "failed > to suspend session with ID [...]" or the programm just gets totally > unresponsive and I have to restart it. > > Ok, that's more interesting and actually suitable for the bug report. Please start up cmd.exe, then: cd path\where\x2goclient.exe\is\installed\in x2goclient.exe --debug > debug.log 2>&1 The debug log could potentially be helpful in tracking this down. When you respond, please make sure to CC 800(a)bugs.x2go.org. Mihai

2 1

Processed: your mail
by owner＠bugs.x2go.org 10 Mar '15

10 Mar '15

Processing commands for control(a)bugs.x2go.org: > reassign 788 x2goserver-xsession Bug #788 {Done: Mihai Moldovan <ionic(a)ionic.de>} [x2goserver-xsettings] Pyhoca-Gui freezes when connection to desktop Warning: Unknown package 'x2goserver-xsettings' Bug reassigned from package 'x2goserver-xsettings' to 'x2goserver-xsession'. No longer marked as found in versions 4.0.1.18. Ignoring request to alter fixed versions of bug #788 to the same values previously set > forcemerge 632 788 Bug #632 {Done: X2Go Release Manager <git-admin(a)x2go.org>} [x2goserver-xsession] x2goserver Xsession fix for Gentoo (and probably RHEL) Bug #788 {Done: Mihai Moldovan <ionic(a)ionic.de>} [x2goserver-xsession] Pyhoca-Gui freezes when connection to desktop There is no source info for the package 'x2goserver-xsession' at version '4.0.1.19' with architecture '' Unable to make a source version for version '4.0.1.19' Marked as fixed in versions 4.0.1.19. There is no source info for the package 'x2goserver-xsession' at version '4.0.1.18' with architecture '' Unable to make a source version for version '4.0.1.18' Marked as found in versions 4.0.1.18. Added tag(s) pending. Merged 632 788 > End of message, stopping processing here. Please contact me if you need assistance. -- 632: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=632 788: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=788 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Bug#788: Pyhoca-Gui freezes when connection to desktop
by Ja Bi 10 Mar '15

10 Mar '15

Package: Pyhoca-Gui-0.5.0.3, python-x2go 0.5.0.2, x2goserver-4.0.1.18-r2 (gentoo) I tried with lxde and xfce and both do the same. After some time (2-20sec) it stops, freeze somehow. You cant move any window, nothing, but when you are on a bottom frame of some window, mouse pointer changes(but you cant still resize the window) 1.anytime when i connect to server and try to run lxde or xfce session 2.nothing 3.run session smoothly 4.it is frozen client is updated gentoo linux server is updated gentoo linux with nx-3.5.0.28 NXAGENT - Version 3.5.0 * dev-util/xfce4-dev-tools Latest version installed: 4.11.0 * x11-themes/gtk-engines-xfce Latest version installed: 3.0.1-r201 * xfce-base/libxfce4ui Latest version installed: 4.11.1 * xfce-base/libxfce4util Latest version installed: 4.11.0 * xfce-base/xfce4-appfinder Latest version installed: 4.11.0 * xfce-base/xfce4-meta Latest version installed: 4.10 * xfce-base/xfce4-panel Latest version installed: 4.11.1 * xfce-base/xfce4-session Latest version installed: 4.11.0-r2 * xfce-base/xfce4-settings Latest version installed: 4.11.3 lxde-base/lxde-common Latest version installed: 0.5.5-r3

4 7

Bug#788: Re: Bug#788: Bug#788: Pyhoca-Gui freezes when connection to desktop
by Ja Bi 10 Mar '15

10 Mar '15

Libdebug shows nothing...:( -------- Původní zpráva -------- Od: Mihai Moldovan Datum: 21.2.2015 Předmět: Re: [X2Go-Dev] Bug#788: Bug#788: Pyhoca-Gui freezes when connection to desktop Hi Sorry for the delay. I've noticed your message the first time around, but given that gevent is recent enough, I didn't have any additional information. I can only suggest to start pyhoca-gui with the additional parameters --debug and --libdebug to see what is going on (if anything.) Disclaimer: I have practically no idea of python in general and X2Go's python code (including pyhoca*) specifically, Mike is probably the best person to help with that. Mihai On 21.02.2015 11:16 AM, Ja Bi wrote: > Second try :( > > dev-python/wxpython-3.0.2.0:3.0::gentoo USE="cairo libnotify opengl > -examples" PYTHON_TARGETS="python2_7" > > dev-python/ gevent > Latest version installed: 1.0.1 > > [...] > > > PyHoca-GUI with wxPython 3.0 and python-gevent less!) > > behaves weirdly. > > > > What wxPython version do you use? > > > > What gevent version do you use? >

3 16

Bug#798: Fwd: Bugs report using ssh proxy with x2goplugin
by nicolas husson 10 Mar '15

10 Mar '15

To: submit(a)bugs.x2go.org From: nicko466(a)gmail.com Subject: can't use ssh proxy with x2goplugin Package: x2goclient Version: 4.0.3.1 When I'm trying to use the ssh proxy configuration in session file with x2goplugin it seems its not working. Indeed, if you look at the session file in "~/.x2goclient/sessions" which contains all the configuration of the session of x2goclient application you will see all the descriptions of each session. Which looks like this for each session: [20150220100323537] speed=2 pack=16m-jpeg quality=3 fstunnel=true export="/home/user/Bureau/MountDistantX2goPc:1;" iconvto=UTF-8 iconvfrom=ISO8859-1 useiconv=false fullscreen=false multidisp=false display=1 maxdim=false rdpclient=rdesktop directrdpsettings= width=800 height=600 dpi=96 setdpi=true xinerama=false clipboard=both usekbd=true type=auto sound=true soundsystem=pulse startsoundsystem=true soundtunnel=true defsndport=true sndport=4713 print=true name=username icon=:icons/128x128/x2gosession.png host=localhost user=userTest key= rdpport=3389 sshport=2222 autologin=false krblogin=false krbdelegation=false directrdp=false rootless=false published=false applications=WWWBROWSER, MAILCLIENT, OFFICE, TERMINAL command=SHADOW rdpoptions= rdpserver= xdmcpserver=localhost *usesshproxy=true* *sshproxytype=SSH* *sshproxyuser=usernameProxy* *sshproxykeyfile=* *sshproxyhost=123.452.111.124* *sshproxyport=22* *sshproxysamepass=false* *sshproxysameuser=false* *sshproxyautologin=true* *sshproxykrblogin=false* The part which interest me is the bold part. Indeed, it works when i'm using this conf file with x2go client. And when i'm using x2goplugin with this configuration it doesn't work. I take a look at the network traffic and it seems that x2goplugin doesn't look at the bold part (the ssh proxy). This is why I think that x2goplugin doesn't work with ssh proxy. Attachment : 0001-enable-use-of-ssh-proxy-conf-with-x2goplugin.patch -- _________________________________________________________________________ Nicolas HUSSON

3 3

Bug#804: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mihai Moldovan 09 Mar '15

09 Mar '15

tag #804 pending fixed #804 4.0.4.0 thanks Hello, X2Go issue #804 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=f44a6d0 The issue will most likely be fixed in src:x2goclient (4.0.4.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit f44a6d0716e92882e4714b097bbd68ea3975331e Author: Mihai Moldovan <ionic(a)ionic.de> Date: Sat Mar 7 02:09:39 2015 +0100 onmainwindow.cpp: actually call slotTunnelOk(int), do not generate a run time error by calling the non-existent function slotTunnelOk(). Fixes #804. diff --git a/debian/changelog b/debian/changelog index 1d4fb5b..7cf61db 100644 --- a/debian/changelog +++ b/debian/changelog @@ -181,6 +181,9 @@ x2goclient (4.0.4.0-0x2go1) UNRELEASED; urgency=low - Windows: correctly reference windows icon. - x2goclient.spec: fix builds on Fedora and related due to failing removal of browserplugin directory. That's non-critical. + - onmainwindow.cpp: actually call slotTunnelOk(int), do not generate a run + time error by calling the non-existent function slotTunnelOk(). + Fixes: #804. -- X2Go Release Manager <git-admin(a)x2go.org> Thu, 19 Feb 2015 13:25:28 +0100

2 1

Bug#794: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mihai Moldovan 09 Mar '15

09 Mar '15

tag #794 pending fixed #794 4.0.4.0 thanks Hello, X2Go issue #794 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=fd09a56 The issue will most likely be fixed in src:x2goclient (4.0.4.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit fd09a566f234f80574b1d037f68c9087f75293c7 Author: Mihai Moldovan <ionic(a)ionic.de> Date: Mon Mar 9 22:53:56 2015 +0100 onmainwindow.cpp: use Non_Modal_MessageBox::critical function to display errors relating to missing sshd host keys. Fixes #794. diff --git a/debian/changelog b/debian/changelog index 393f57e..3c1740e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -188,6 +188,8 @@ x2goclient (4.0.4.0-0x2go1) UNRELEASED; urgency=low keys. Fixes: #793. - non_modal_messagebox.{cpp,h}: Add new Non_Modal_MessageBox class for non-modal message boxes. + - onmainwindow.cpp: use Non_Modal_MessageBox::critical function to display + errors relating to missing sshd host keys. Fixes: #794. -- X2Go Release Manager <git-admin(a)x2go.org> Thu, 19 Feb 2015 13:25:28 +0100

2 1

Bug#793: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mihai Moldovan 09 Mar '15

09 Mar '15

tag #793 pending fixed #793 4.0.4.0 thanks Hello, X2Go issue #793 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=aa11eb5 The issue will most likely be fixed in src:x2goclient (4.0.4.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit aa11eb5bd871b1ea73d950df39e4a4d8d619cb0a Author: Mihai Moldovan <ionic(a)ionic.de> Date: Sat Mar 7 03:56:38 2015 +0100 onmainwindow.cpp: clarify message regarding missing SSH daemon host keys. Fixes #793. diff --git a/debian/changelog b/debian/changelog index 7cf61db..a63847c 100644 --- a/debian/changelog +++ b/debian/changelog @@ -184,6 +184,8 @@ x2goclient (4.0.4.0-0x2go1) UNRELEASED; urgency=low - onmainwindow.cpp: actually call slotTunnelOk(int), do not generate a run time error by calling the non-existent function slotTunnelOk(). Fixes: #804. + - onmainwindow.cpp: clarify message regarding missing SSH daemon host + keys. Fixes: #793. -- X2Go Release Manager <git-admin(a)x2go.org> Thu, 19 Feb 2015 13:25:28 +0100

2 1

[git repositories] New branching concept
by Mihai Moldovan 09 Mar '15

09 Mar '15

Hi, This information targets all users with commit privileges to the official x2go repositories. Coming up soon™, new branching policies will be in effect. TLDR: DO: - create feature branches as "feature/<name>" - comment on need for "bugfix/<name>" branches - rebase your feature branches against master - only send "pull requests" for your feature branches once they have been rebased - NO MERGE CONFLICTS! - send emails to git-admin(a)x2go.org for branch deletion, renaming or "pull requests" DON'T: - be afraid to make mistakes on your feature branches or ask - try to rebase or merge other branches into master (will be rejected) - try to delete branches (will be rejected) - try to rename branches (might leave you with a mess) Details: Historically, non-fast-forward (created by the rebase operation) and merge commits have been rejected on all branches. These restrictions will be loosened to allow committers more control over their branches and ease merging of pull requests. The new policies will allow non-fast-forwards and merge commits within feature branches. That means developers will be able to to rebase and merge other branches. In fact, committers will be required to rebase their feature branch against the master branch for pull requests. Requests with conflicts will not be merged. This new concept will not affect master and release/* branches. On these branches, rebases and merges will still be rejected. Feature branches should follow the template feature/<name> to ensure consistency with our current release/<version> release branches. The current branches will be accordingly renamed once the new policy is in effect. If you do see any benefit of a new branch type, like bugfix/<name> or bugfix/<version>, please let me know. We can then discuss policies regarding those. For now, please refrain from creating these branches. Please send an email to git-admin(a)x2go.org to initiate a pull request. Don't forget to mention the branch you want to have merged into master. The admin will review and then either merge or deny your request. This said, please try to refrain from uselessly rebasing your branches to delete mistakes or squish commits together, unless it really makes sense. Don't be afraid to be human. Commit early, commit often. Don't forge the history. For renaming and deletion of branches, please also contact git-admin(a)x2go.org. Creation is possible without former notification of git-admin, but please make sure to follow naming conventions as outlined in this email. The new policies will be effective once implemented and Mike#1 finishes the outstanding release of all components. Best Mihai

1 2

Maintaining VcXsrv and where to host it
by Michael DePaulo 09 Mar '15

09 Mar '15

Hi everybody, This is something I wanted to discuss at our meeting today: http://wiki.x2go.org/doku.php/2015-03:day-2015-03-05?s[]=meeting Intro: For those who do not know, VcXsrv is a port of the X.org X server to Windows. Specifically, the MS Visual C compiler. X2Go Client for Windows bundles and uses it. So does PyHoca-GUI. SourceForge lots you create personal git repos based off of official project repos. So here is my branch on my personal git repo: https://sourceforge.net/u/mikedep333/vcxsrv/ci/xp-1.15.2.x-x2gochanges/tree/ The differences from usptream VcXsrv are: 1. I am currently maintaining the 1.15.2.x branch, rather than the 1.16.x branch of upstream. Upstream never maintains previous branches/releases. 2. I applied the nx-libs compatibility/bugfix patch from Alex, winmultiwindow.patch . I am keeping this on a branch with the suffix "-x2gochanges" branch because my convo with Alex indicated that upstream would not accept it. 3. I am maintaining Windows XP compatibility for the time being. 4. I respond quickly to security vulnerabilities in xorg-server and all the other bundled components (e.g., openssl, freetype2, X11 libs) Upstream simply updates/upgrades each component to the latest versions (even unreleased master branches often) on a seemingly arbitrary schedule. There are a few problems with using SourceForge: 1. SourceForge's support for git is terrible. Whenever I attempted a "request merge" from branch Y on my repo to the master branch on the usptream VcXsrv repo, it treid to merge my master branch instead. 2. SourceForge has recently done terrible things as GitHub has gained popularity: https://en.wikipedia.org/wiki/SourceForge#DevShare_adware_controversy 3. My repo isn't very visible because it is a personal git repo, not a project repo. 4. Upstream VcXsrv (1 developer, marha) is horribly unresponsive. They ignore bugs and merge requests for CVEs. Only once have I gotten an email reply to a merge request. He had a valid reason to reject the merge request, but he didn't actually reject it, so it is still open. I never had a bug report replied to. So effectively, staying on SourceForge does not enable us to upstream anything. Here is what I propose: 1. Host VcXsrv on both code.x2go.org and https://github.com/arcticaproject , simiilar to how nx-libs is hosted. 2. Prefer github for issue tracking. If an issue does affect X2Go users, then use the X2Go BTS and link to the github issue tracker. 3. Create a README.md similar to the one for nx-libs 3.6.x https://github.com/ArcticaProject/nx-libs/blob/3.6.x/README.md 4. Do not rename VcXsrv. State in the README.md that Arctica and X2Go are maintaining branch X or branch Y currently, or possibly even 2 branches at once. This is analogous to Linux distros maintaining a version of a package. 5. In the README.md or the github releases page, link to our builds under: http://code.x2go.org/releases/binary-win32/3rd-party/vcxsrv-modified-by-x2g… 6. Rebase to VcXsrv 1.16.x in time for X2Go Client 4.0.4.0. 7. Pull from upstream VcXsrv (the master branch) continuously. 8. Hopefully receive many pull requests via GitHub :) -Mike#2

4 7

Bug#806: x2goserver database problems was root cause?
by Jason Alavaliant 09 Mar '15

09 Mar '15

Further digging through my install revealed that in the database the used_ports table had 36108 entries recording every port from 30001 up to 66109 in use. The session table didn't have anywhere near that many sessions recorded as in use, so I ran a "delete from used_ports where session_id not in (select session_id from sessions);" which removed 34683 rows from the table. My clients are now getting ports in a much more sensible range provided back from the x2goserver when establishing a connection. Reading the database creation code it looks like there should be a trigger deletes from used_ports when a session table row is removed so I think my database might have somehow failed to create that trigger on creation? Still digging into exactly how the data got into the state it was in.

1 0

Bug#807: Please record and send a PulseAudio debug log
by Michael DePaulo 09 Mar '15

09 Mar '15

Please record and send a PulseAudio debug log. You do not need to be using a debug build to do this: 1. Run x2goclient.exe with --debug 2. Reproduce this problem. You can exit x2goclient when done. 3. Assuming your %USERPROFILE% is C:\Users\mike.DEPAULO, look under C:\Users\mike.DEPAULO\.x2go\pulse\ 4. Sort the subfolders by date. The newest (or only) subfolder will whose name begins with "tmp" contain the pulse.log file. This is the droid we're looking for. -Mike#2

2 1

Bug#807: PulseAudio dies when accessed, when x2goclient.exe is run on a Windows 2012 Terminal Server (within a native RDP desktop connection)
by Stefan Baur 08 Mar '15

08 Mar '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Package: x2goclient Version: 4.0.3.1 Situation: Hardware: Windows Server 2012, installed as Terminal Server Debian Linux 7.8( Wheezy), installed as X2Go Server Windows 7x64 Client Connection scenario: 0) Windows 7 Client tries to play a local sound file. Result: Sound works just fine. 1) Windows 7 Client connects to Debian Linux 7.8 using X2GoClient. Result: Sound works just fine. 2) Windows 7 Client connects to Windows Server 2012 using RDP (mstsc.exe). *NOT* via X2Go's RDP proxy feature. Result: Sound works just fine. 3) Windows 7 Client, connected to Windows Server 2012 using RDP (mstsc.exe), again, *NOT* via X2Go's RDP proxy feature, tries to run X2GoClient *on the Windows Server 2012* *inside* the native RDP Session. Result: Sound fails for all things X2Go. Analysis: It seems that PulseAudio dies as soon as one tries to play sound. The following are captures of the tasks running on the W2K12 server. x2goclient running, no attempt to play a sound has been made: PS C:\Users\Administrator> tasklist /fi "USERNAME eq DocThor" Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung ========================= ======== ================ =========== =============== rdpclip.exe 3364 RDP-Tcp#2 4 6.108 K taskhostex.exe 2368 RDP-Tcp#2 4 5.896 K explorer.exe 4008 RDP-Tcp#2 4 42.556 K powershell.exe 4164 RDP-Tcp#2 4 70.336 K conhost.exe 4172 RDP-Tcp#2 4 7.396 K pageant.exe 4316 RDP-Tcp#2 4 4.252 K x2goclient.exe 4356 RDP-Tcp#2 4 31.188 K x2gohelper.exe 4376 RDP-Tcp#2 4 3.112 K sshd.exe 4408 RDP-Tcp#2 4 6.224 K conhost.exe 4416 RDP-Tcp#2 4 4.808 K ctfmon.exe 4432 RDP-Tcp#2 4 3.332 K vcxsrv.exe 4520 RDP-Tcp#2 4 40.400 K nxproxy.exe 4800 RDP-Tcp#2 4 11.588 K conhost.exe 4808 RDP-Tcp#2 4 2.920 K pulseaudio.exe 2120 RDP-Tcp#2 4 7.876 K conhost.exe 3956 RDP-Tcp#2 4 2.972 K x2goclient running, an attempt to play a sound has been made: PS C:\Users\Administrator> tasklist /fi "USERNAME eq DocThor" Abbildname PID Sitzungsname Sitz.-Nr. Speichernutzung ========================= ======== ================ =========== =============== rdpclip.exe 3364 RDP-Tcp#2 4 6.112 K taskhostex.exe 2368 RDP-Tcp#2 4 5.896 K explorer.exe 4008 RDP-Tcp#2 4 43.920 K powershell.exe 4164 RDP-Tcp#2 4 70.344 K conhost.exe 4172 RDP-Tcp#2 4 7.396 K pageant.exe 4316 RDP-Tcp#2 4 4.252 K x2goclient.exe 4356 RDP-Tcp#2 4 31.228 K x2gohelper.exe 4376 RDP-Tcp#2 4 3.112 K sshd.exe 4408 RDP-Tcp#2 4 6.300 K conhost.exe 4416 RDP-Tcp#2 4 4.808 K ctfmon.exe 4432 RDP-Tcp#2 4 3.344 K vcxsrv.exe 4520 RDP-Tcp#2 4 49.264 K nxproxy.exe 4800 RDP-Tcp#2 4 18.372 K conhost.exe 4808 RDP-Tcp#2 4 2.920 K As you can see, pulseaudio.exe is gone. I can see that this is a rather unusual use case, but still, I'd be interested to know why PulseAudio fails us here. - -Stefan - -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) iQEcBAEBAgAGBQJU/MBAAAoJEG7d9BjNvlEZ5PIH/A2naqofIfgSkR4An2ZlS0ch hBrhvgxpN4J/VM5pSJqPZ07+56rE/96lDkjrfWgysGP6wJtCmUlPWZZxPwO6Y2Ex tNA/AeDX7X40pheXGBHubl1K0Mo2qO3oAsgZAAH0WAepxatRf/wMk5uIggUA/MO7 9ZmVI8zb3p92tzN4qGWZJttc4beDtMcj1tOkH2cn5hQFQ5MlSY+RE6P/pTOh6Lqv iYgVmrejkIWDld3sq/A+C3bwc3VRxU7rZiYDk54LCHgJdaGI3IQEpz/e62ckIs6O DZpWoRfkbPLIAfJaiJb2G217E9clmK/OtBkodfIf/N0cH2zygfrVZ0lWaqDfJNU= =+kKI -----END PGP SIGNATURE-----

1 2

2nd Online ΞX2Go Developer Meeting (2015-02-5/4pm)
by Heinz-M. Graesing 08 Mar '15

08 Mar '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Developers, Again, I'd like to invite you - the DEVELOPPERS of X2Go - to assemble together and talk about X2Go. Our first meeting was successfully established by using our IRC Channel. There will be again a lot of communication, so I suggest not to change this setup (yet) -> #x2go/IRC I'll prepare again a wiki page containing the planed agenda. So please assemble again at 4pm (GMT)! See you soon, Heinz-M. Graesing -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJU812yAAoJEKRUbBMT/NRxBSQQAJVH8TYW+yXs+QXqN+AZEb29 rjZjgMh0EEF2SYBrSC9nPfsrghuFEyXAAIh0abEUuUay41rztrKcSKC5V64q3guH bwYEwoyCgJrU1gtnaU4Cz3fnBJPRUcc/mShxUxUhbu0YyfKmrwf/FA2eWX+7RCcb 3/yAPjtTvfHATxzof2ckoh3+3kuK9Gco19LVJIKQ93mjzmXhQZ44sVKIzYHnX+Pj K4ttOj541SMwBzbAU/xOkBqkvuPdN5O5WF3Aq/jVk1YAbhXz3igfa3dXGWXUkapO QRghHWlJwBh248Vo/w70zMKZh5KnJBhkzZSE7mAWmHlMg7nV3hi+lacuObaGaN0q bamGfpzYqJJKvBfQ2Sumy2YM17eSKmLvKyMp4C8Mb9NZvqnoA/EAkUN663axLW+d n1KWlvqUo/wP1ziHOCedoTlFQV1C7Oaisb5lzsRwQVvRG+rG/KogR8dMB86g/ofk ARWGEHsx/Pk374KPmULdXnoNZg11VN3+srGeHKB8QrrjjPaExVUDoMOFwy2FDTbB x1lOQU8WALOU/fBak73TuleRQNPC9ya3iL76v9b94XP82iWbWJBdjJiMS0y6gjV9 6JsjsWRp9DXbTZem6jFpLIxIwugD+kF9Yw6eG616iOyRQHVrj5C9qqm7/G6KRLUg 9ytuS0HTs7glqV5RXX6u =gPh3 -----END PGP SIGNATURE-----

5 10

Bug#806: connection fails with error binding localhost:XXX when creating new session
by Jason Alavaliant 07 Mar '15

07 Mar '15

Package: x2goclient Version: 4.0.3.2 Severity: important All clients trying to create a new sessions on my x2go broker setup started failing with the error message Unable to create ssl tunnel: Error binding localhost:XXX and in each case the XXX was a port number lower than 1024 Digging through the client code and looking at the shared session database on the backend as far as I can tell the issue is; 1) the session database port numbers have reached values of 65000 and greater (for example on the last session I created the database gr_port was 65087) 2) the client gets given that data and adds 1000 to it (onmainwindows.cpp line "int iport=localGraphicPort.toInt() + 1000;") 3) the resulting port number is over the highest valid port number of 65535 and hence later on when it is used the value overflows around to be port 552 4) ports under 1024 are reserved on Unix and can't be used by normal user processes and hence the error and the connection failing. For now I've worked around the issue by patching the client onmainwindows.cpp section under the "int iport=localGraphicPort.toInt() + 1000;" line to add to the various checks an extra check that sees in the value is over 65535 and if so to subtract 63382 which causes the port value to end up above the 1024 range. I don't think this is a complete fix however since it only covers gr_port (which broke first since it gets 1000 added to it which doesn't seem to occur for sound_port and fs_port?) and I'm not sure if I what direction I should be looking at fixing this in order to make a patch that will be accepted upstream. I'm suspecting this might actually be considered an bug with the x2goserver database code (it shouldn't set port so high?) so I'm hoping you can advise on where I should be concentrating on fixing the code. I'm not sure if you'll think it should be patched both in the client and in the server code or if it should only be checked for in the server code? Thanks Jason

1 0

Processed: your mail
by owner＠bugs.x2go.org 07 Mar '15

07 Mar '15

Processing commands for control(a)bugs.x2go.org: > reassign 788 x2goserver 4.0.1.18 Bug #788 {Done: Mihai Moldovan <ionic(a)ionic.de>} [ pyhoca-gui-0.5.0.3, python-x2go 0.5.0.2, x2goserver-4.0.1.18-r2] Pyhoca-Gui freezes when connection to desktop Warning: Unknown package 'pyhoca-gui-0.5.0.3' Warning: Unknown package '0.5.0.2' Warning: Unknown package 'x2goserver-4.0.1.18-r2' Bug reassigned from package ' pyhoca-gui-0.5.0.3, python-x2go 0.5.0.2, x2goserver-4.0.1.18-r2' to 'x2goserver'. Ignoring request to alter found versions of bug #788 to the same values previously set Ignoring request to alter fixed versions of bug #788 to the same values previously set Bug #788 {Done: Mihai Moldovan <ionic(a)ionic.de>} [x2goserver] Pyhoca-Gui freezes when connection to desktop There is no source info for the package 'x2goserver' at version '4.0.1.18' with architecture '' Unable to make a source version for version '4.0.1.18' Marked as found in versions 4.0.1.18. > thanks Stopping processing here. Please contact me if you need assistance. -- 788: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=788 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Processed: your mail
by owner＠bugs.x2go.org 07 Mar '15

07 Mar '15

Processing commands for control(a)bugs.x2go.org: > close 788 Bug #788 [ pyhoca-gui-0.5.0.3, python-x2go 0.5.0.2, x2goserver-4.0.1.18-r2] Pyhoca-Gui freezes when connection to desktop Warning: Unknown package 'pyhoca-gui-0.5.0.3' Warning: Unknown package '0.5.0.2' Warning: Unknown package 'x2goserver-4.0.1.18-r2' Marked Bug as done Warning: Unknown package 'pyhoca-gui-0.5.0.3' Warning: Unknown package '0.5.0.2' Warning: Unknown package 'x2goserver-4.0.1.18-r2' > thanks Stopping processing here. Please contact me if you need assistance. -- 788: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=788 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Bug#805: Windows client does not resume, Linux client works OK
by Andreas Kinzler 06 Mar '15

06 Mar '15

Package: x2goclient Version: 4.0.3.x x2go server is 4.0.1.19 (either debian 7.8 or Gentoo) and client is 4.0.3.x. Resume does not work with the Windows client but works OK with the Linux client. There is nothing special in the log. The Windows client hangs with "connecting" and does not do anything. Regards Andreas

1 0

Re: [X2Go-Dev] [X2Go-User] win32 x2go client not resuming
by Will Wagner 06 Mar '15

06 Mar '15

I get an ssl error when I try to use 3.99.2.2. I redirected stderr and ran the app. This is the output: x2go-INFO-1> "Starting x2goclient..." x2go-WARNING-1> "Can't load translator: :/x2goclient_en_gb" x2go-WARNING-2> "Can't load translator: :/qt_en_GB" x2go-INFO-3> "Started x2goclient." x2go-INFO-8> "Starting connection to server: 172.20.0.2:22" Object::connect: No such slot ONMainWindow::slotTunnelOk() Looking at the source code it appears that the sshconnection comes up and calls the slot slotTunnelOk(int). That function checks if winServersReady and if not tries to call itself again in 100mS by calling QTimer::singleShot ( 100, this, SLOT ( slotTunnelOk() ) ); The int argument is missing in slotTunnelOk and so it fails and the app then hangs. Does that sound like a reasonable analysis? Rather than trying to build the code myself could someone doa build with that change and I'm happy to test it. Thanks Will On 03/03/2015 13:07, Dillmann, Jan (IKET) wrote: > Hi, > > having exactly the same behaviour with several distributions (Xubuntu 14.04 > LTS, latest Debian). > I tested different x2go-server versions from 4.0.1.16 to 4.0.1.19. > > As a workaround I am using x2go client 3.99.2.2. With v3 I am able to resume > sessions without problems. > > I tried every possible v4 client without success on several windows versions > (windows 7 and windows 8). > > > Regards, > > Jan > > -----Ursprüngliche Nachricht----- > Von: x2go-user-bounces(a)lists.x2go.org > [mailto:x2go-user-bounces@lists.x2go.org] Im Auftrag von Will Wagner > Gesendet: Dienstag, 3. März 2015 13:03 > An: x2go-user(a)lists.x2go.org > Betreff: [X2Go-User] win32 x2go client not resuming > > Hello, > > I have just setup a new server running debian jessie with x2go server > (4.0.1.18-0x2go1+git20141006.949+jessie). > > I have windows client 4.0.3.2 > > The first time I connect it all works. However on a subsequent attempt to > resume it doesn't work. After entering password the client pops up the > connecting dialog never outputs any text even though I have sow details > checked. I also get the task bar popup saying it has connected although all > options are greyed out. It appears to sit there forever at this point. > > If I look at the server logs I see: > Mar 3 11:42:43 waldorf2 /usr/bin/x2goresume-session: client 172.20.1.8 has > successfully resumed session with ID willw-50-1425325134_stDXFCE_dp32 Mar 3 > 11:43:14 waldorf2 /usr/bin/x2gosetkeyboard: > /home/willw/.x2go/C-willw-50-1425325134_stDXFCE_dp32/keyboard did not appear > within 30s after agent startup > > So it appears that the client has got stuck part way though resuming? > Anyone got any ideas what this could be? Where can I look on windows for log > messages from the client? > > Thanks > Will > > _______________________________________________ > x2go-user mailing list > x2go-user(a)lists.x2go.org > http://lists.x2go.org/listinfo/x2go-user > > > > _______________________________________________ > x2go-user mailing list > x2go-user(a)lists.x2go.org > http://lists.x2go.org/listinfo/x2go-user > -- ------------------------------------------------------------------------ Will Wagner will_wagner(a)carallon.com Development Manager Office Tel: +44 (0)20 7471 9224 Carallon Ltd, Studio G20, Shepherds Building, Rockley Rd, London W14 0DA ------------------------------------------------------------------------

2 4

"features/cleanup" (and "bugfix/osx") branch in x2goclient.git
by Mihai Moldovan 06 Mar '15

06 Mar '15

Hi all For the last couple of weeks, I've been working on the OS X side of X2Go Client, as some of you may or may not have noticed. Part of that work was a restructuring of the x2goclient.git repository. I started forking master to features/cleanup, gradually moved files around into new sub-directories and adapted all files affected by these moves. Additionally, macbuild.sh has been severely improved. It now supports multiple environment variables. A help message can be queried by (./)macbuild.sh -h or --help from any OS and will not be included here. x2goclient is now built in the client_build sub-directory to not pollute the main directory or overwrite the Makefile. List of changes: - moved .cpp/.h/.ui sources to src/ - moved png, svg and icons to res/ - moved all translation files to res/i18n/ - moved OS X build related files to res/macbuild/ - removed config_mac.sh (macbuild.sh supersedes it) - aforementioned macbuild.sh changes - change "legacy" resource URL's (":/icons/...", ":/png/...", ":/svg/...") to their ":/img/..." counterparts - added transparent wrapper to x2goutils.cpp for wrapping "legacy" resource URL's to their new locations for backwards-compatibility with old session config files - fixed some compiler warnings (mostly unused variables/parameters) - fixed *some* QMessageBox::<function> calls. There still are a lot of plain incorrect calls left. - typo, grammar and outdated information fixes A visual representation of these changes can be seen when comparing http://code.x2go.org/gitweb?p=x2goclient.git;a=tree and http://code.x2go.org/gitweb?p=x2goclient.git;a=tree;h=refs/heads/feature/cl… The bugfix/osx branch is currently equivalent to features/cleanup. Subsequent OS X fixes will be published on bugfix/osx. features/cleanup is scheduled to be merged into master (and thus become the X2Go Client 4.0.4.0 base) either shortly after this report, or after the upcoming X2Go Developer Meeting at the beginning of March. What is YOUR opinion? Best, Mihai

3 3

Bug#803: Further debugging
by Florian Wicke - Hetzner Online AG 05 Mar '15

05 Mar '15

My production environment is debian/jessie but the same problematic behaviour is present in fedora 21 (x2goserver from default repo) and ubuntu 14.10 (ppa:x2go/stable) I don't think it's something directly related to x2go but you might have way more insight in the process of the session management and can provide me with more hints to where the problem could actually be. -- Best Regards, Florian Wicke Hetzner Online AG Industriestr. 25 91710 Gunzenhausen Tel: +49 9831 505-0 Fax: +49 9831 505-3 florian.wicke(a)hetzner.de http://www.hetzner.de Registergericht Ansbach, HRB 3204 Vorstandsvorsitzender: Dipl. Ing. (FH) Martin Hetzner Aufsichtsratsvorsitzende: Diana Rothhan

1 0

Bug#789: Kerberos 5 auth. reset putty sessions list
by Jozsef Kozo 05 Mar '15

05 Mar '15

Package: X2Go Client Version: 4.0.3.1( Qt-4.8.6 ) OS: Windows 8.1 Enterprise x64 Dear Dev. Team, I switched on "Kerberos 5 (GSSAPI) authentication" on X2Go client and all my saved Putty sessions are gone. So Saved session list is empty. I tried to recover from registry but can't. You can reproduce like this: 1. Save a session to Putty 2. Set Kerberos 5 (GSSAPI) authentication 3. Connect to X2Go server Any idea how can i recover my list? Best, Jozsef Kozo

2 3

Bug#625: Enabling Kerberos5 (GSSAPI) Auth deletes saved Putty Sessions
by Sterzinger, Benedikt 05 Mar '15

05 Mar '15

Package: x2goclient Version: 4.0.2.1 After establishing to a x2go server with GSSAPI auth enabled, all the sessions saved in putty are gone. We found this snippet in the source code (sshprocess.cpp): void SshProcess::rmPuttyReg(QString uuidStr) { QSettings st("HKEY_CURRENT_USER\\Software\\SimonTatham\\PuTTY\\Sessions", QSettings::NativeFormat); st.remove(uuidStr); st.sync(); } ... void SshProcess::slotSshProcFinished(int exitCode, QProcess::ExitStatus exitStatus) { normalExited=false; if (exitCode==0 && exitStatus==QProcess::NormalExit) normalExited=true; #ifdef DEBUG x2goDebug<<"ssh process exit code :"<<exitStatus; #endif #ifdef Q_OS_WIN if(masterCon->useKerberos()) { rmPuttyReg(procUuid); } #endif slotChannelClosed(this,procUuid); } Is this necessary? *********** Hinweis zur Datensicherheit Die Datenübertragung über das Internet erfolgt derzeit im Wesentlichen ungesichert. Die Vertraulichkeit sensibler, personenbezogener Daten gegenüber Dritten ist nicht gewährleistet. Es ist nicht ausgeschlossen, dass übermittelte Daten von Unbefugten zur Kenntnis genommen und eventuell sogar verfälscht werden. Falls Sie uns Informationen mit vertraulichem Inhalt und/oder personenbezogenen, sensiblen Daten per E-Mail zusenden wollen, empfehlen wir Ihnen, diese zu verschlüsseln. Bitte setzen Sie sich bzgl. der geeigneten Kryptotechnik mit uns in Verbindung. Wenn Sie Informationen unverschlüsselt per E-Mail an uns senden, erklären Sie sich mit der unverschlüsselten Beantwortung per E-Mail durch uns einverstanden. Falls Sie dies nicht wünschen, teilen Sie uns dies bitte mit. Sie erhalten die von Ihnen gewünschten Informationen dann auch gerne per Post oder Telefax übermittelt. Hinweis zu Vertraulich- und Rechtsverbindlichkeit Der Inhalt des erhaltenen E-Mails ist vertraulich zu behandeln und ausschließlich für den bezeichneten Adressaten bzw. dessen Vertreter bestimmt. Sollten Sie nicht der für unsere Nachricht vorgesehene Empfänger sein, so bitten wir Sie, sich mit dem Absender dieser E-Mail unverzüglich in Verbindung zu setzen, die empfangene E-Mail nebst etwaiger Anlagen aus Ihrem System zu löschen sowie ggf. existierende Ausdrucke zu vernichten. Wir machen darauf aufmerksam, dass der Inhalt dieser E-Mail nicht rechtsverbindlich ist, da über das Internet erstellte E-Mails leicht manipuliert oder unter falscher Absenderkennung erstellt werden können. Eine rechtsverbindliche Bestätigung erhalten Sie gerne auf Anfrage in schriftlicher Form. Eine Veröffentlichung, Vervielfältigung oder Weiterleitung des Inhaltes dieser E-Mail ist nur nach unserer vorherigen schriftlichen Einwilligung gestattet.

2 1

Bug#625: Making this grave due to data loss
by Michael DePaulo 05 Mar '15

05 Mar '15

Control: severity -1 grave Control: tags -1 build-win32

1 0

Bug#789: Merging this with #625
by Michael DePaulo 05 Mar '15

05 Mar '15

Control: forcemerge 625 -1 I just noticed the email about this being a duplicate. Thank you for help with bug triaging.

1 0

Bug#789: I reproduced it
by Michael DePaulo 05 Mar '15

05 Mar '15

I reproduced this bug on my system: X2Go Client for Windows 4.0.3.2-20150301-debug Windows 10 64-bit (build 9926 with latest patches) I've CC'd the developer who added Windows Kerberos support, Alex. I've attached the "Sessions" registry key before and after. The test session I created, uss-phoenix, was clearly deleted. HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\uss-phoenix\ However, there is no indication in the debug log (attached) that the Sessions key or its subkey was touched. I'll take a look at the x2goclient source code to figure out what is going on. -Mike#2

2 2

Bug#803: Numlock-state resets on first keypress after resume/start
by Florian Wicke - Hetzner Online AG 04 Mar '15

04 Mar '15

Package: x2goserver Version: 4.0.1.18-0x2go1+git20141006.949+jessie.main.1 Unfortunately i am NOT able to "synchronize" the local numlock status to the client session in any way or even CHANGE the numlock status of the usersession. Clients running as thinclients with "x2gothinclient-displaymanager" from heuler and everything is up2date with the "heuler" branch. Desktop is XFCE but the same issue appears with KDE or LXDE. Numlock-state saving is disabled - but should not be executed on resume as far as i understand - just on starting a new session. Even replacing "x2gosetkeyboard" with an empty "exit 0"-script does not change this behavier (my first guess was the setxkbd resetting the numlock state on keypress). Any ideas how i can debug this further? Steps to reproduce: 1. turn numlock off and verify with 'numlockx status' in the user session 2. start terminal with 'numlockx status'-loop like: while :; do sleep 1; numockx status; done 3. have a post-resume.d-script present with 'numlockx on'-command (with correct DISPLAY set) 4. suspend session (5. turn local numlock on) 6. resume session 7. see 'numlockx status' transists from "off" to "on" as executed from the post-resume.d-script but now the unexpected problem: 8. press ANY key on the keyboard 9. see 'numlockx status' transists to "off" again no matter what your local keyboard is set. Time between #7 and #8 does not matter - first keypress after resume resets numlock. Best Regards, Florian Wicke Hetzner Online AG Industriestr. 25 91710 Gunzenhausen Phone: +49 9831 505-0 Fax: +49 9831 505-3 florian.wicke(a)hetzner.de http://www.hetzner.de Registergericht Ansbach, HRB 3204 Vorstandsvorsitzender: Dipl. Ing. (FH) Martin Hetzner Aufsichtsratsvorsitzende: Diana Rothhan

1 0

Bug#789: Kerberos 5 auth. reset putty sessions list
by Earl Tom 04 Mar '15

04 Mar '15

I think this is a duplicate of bug #625. There's a snippet of code attached to that bug that looks suspicious. I think it's trying to delete one session but ends up deleting them all. This hits me, too, so it would be nice to have it fixed. My workaround is that I've exported a .reg file of the sessions and import that after starting x2goclient. Thanks, -- Earl

1 0

Bug#765: Kex Error in X2Go client
by promox 04 Mar '15

04 Mar '15

Package: X2GO Client Version: 4.0.3.1 Hi, Before my server using ubuntu but now I am switching to centos. But when I connect to server using x2go. I got error message: kex error: no match for method server host key algo: server [ssh-rsa,ssh-dss], client [ecdas-sha2-nistp256]. Have anyway to fix that error?

4 6

Bug#704: Desktop sharing works well after installing x2godesktopsharing version 3.1.1.2 and x2goserver version 4.0.1.19
by Alexey Murz Korepov 03 Mar '15

03 Mar '15

Desktop sharing works well after installing x2godesktopsharing version 3.1.1.2 and x2goserver version 4.0.1.19 But in PPA https://launchpad.net/~x2go/+archive/ubuntu/stable available only 3.1.1.1 version, with this version Desktop sharing not working - always receive "Access denied from user" Can you update x2godesktopsharing package from 3.1.1.1 to 3.1.1.2 on https://launchpad.net/~x2go/+archive/ubuntu/stable ? Thanks! -- Best regards, Alexey Murz Korepov. Email, Jabber: murznn(a)gmail.com

1 0

Bug#775: About X servers
by Michael DePaulo 03 Mar '15

03 Mar '15

Hi Samo, Sorry to hear that you are running into these issues. The situation with X2Go Client for Windows and X servers is this: We support using an external X server, but we both bundle and maintain VcXsrv on a 1.15.2.x branch.[1] We intend to make any source code changes necessary to VcXsrv to fix integration issues with X2Go. In fact, we already made one X2Go integration change (bug #594, winmultiwindow.patch). However, those changes are slow to be made because we have few developers who spend pro bono time maintaining X2Go Client for Windows. Patches are welcome. These bugs/issues can also be fixed on contract. So in conclusion, we do intend to fix these issues, regardless of what piece of software is at fault. However, we cannot give an ETA. -Mike#2 [1] The VcXsrv 1.15.x branch we are maintaining is here: https://sourceforge.net/u/mikedep333/vcxsrv/ci/xp-1.15.2.x-x2gochanges/tree/ We may rebase to a newer VcXsrv branch soon.

1 0

Bug#775: desktop sharing full screen usability issues
by Samo Dadela 03 Mar '15

03 Mar '15

Package: x2goclient (Windows 7 x86) Version: 4.0.3.0 [ Server: FC21 x64 ] Hi, Found x2go recently as an alternative to NoMachine NX (which is not usable for programming since jpg compression makes terminal windows unusable... and there are other issues like random hangups, etc). My use case is as follows: - connect to the existing desktop session in full screen (aka desktop sharing in x2go) - need grab keyboard when connected (example: alt-tab must switch between windows in the session, not between Windows on the client, ctrl-alt-left must switch to another desktop on the server, etc..) - be able to enter/exit fullscreen mode somehow - by using a hotkey, for example - be able to see the mouse cursor In other words... behave as though I was connected to the real desktop on the server. What I tried: 1) Specifying fullscreen in the Session preferences What happens: - I get a full screen windows, - there is no mouse cursor (the mouse works - I see the windows receiving focus) - When using alt-tab it switches between windows on the client (other combinations are also intercepted by Windows, not the desktop) 2) To make alt-tab work, I tried the instruction at http://www.terheyden.com/blog/?p=202 - (x2go client - getting Alt+Tab to work) by specifying -rootless and -keyhook (don't forget to change the path to VcXsrv.exe otherwise you can't use x2go client anymore without deleting the registry keys; this is an already know bug). What happens: - alt-tab works, other keys work (like ctrl-alt-left to switch desktops) - still no mouse cursor (even tried -swcursor but it doesn't help) - can't enter/exit full screen... it seems that the combinations ctrl-alt-f are now passed to the server 3) BTW, tried pyhoca too - but it complains that it needs server 4.1 for desktop sharing ;( Maybe the above (apart from the mouse cursor) are not bugs but just the way things work... What I would like: - changing x2goclient on Windows so that such functionality can be achieved by a few mouse clicks (add a grab keyboard option, define 'exit x2go' hotkey,...) or... if this is too much work - some instruction on how to achieve the functionality mentioned above (add it to the FAQ?) Next I saw some post claiming success using Xming... I'll give that a shot, but wouldn't it be better if x2go handled it by itself? Best regards, Samo

2 1

Bug#510: ctrl-alt-f crashes x2go windows 7 client
by Rob MacLachlan 03 Mar '15

03 Mar '15

Package: x2go I'm running x2go win32 client, version 4.0.2.0. Similar behavior happened in 4.0.1.2. This with remote host running x2goversion x2goagent: 3.5.0.21 x2goserver: 4.0.1.13 x2goserver-extensions: 4.0.1.13 x2goserver-fmbindings: 4.0.1.13 x2goserver-xsession: 4.0.1.13 # Springdale linux 6.5 uname -a inux lov3.int.autonlab.org 2.6.32-431.17.1.el6.x86_64 #1 SMP Wed May 7 21:28:34 EDT 2014 x86_64 x86_64 x86_64 GNU/Linux Whenever I type ctrl-alt-f, bad things happen. I understand this is supposed to switch full screen mode in the default shortcuts, but it doesn't actually successfully create a working full-screen setup (no keystrokes are recognized), and anyway the reason I'm typing ctrl-alt-f is to do "forward form" in EMACS. I would be fine with just changing the default shortcuts, but I haven't been able to figure out how to do that either. The wiki instructions on changing the shortcuts don't seem to work (maybe obsolete file location?). Rob

2 1

Bug#510: Dup of #496, shortcut configuration is #741
by Michael DePaulo 03 Mar '15

03 Mar '15

Hi Rob, Sorry to hear that you ran into this bug. The crashing bug is #496. I will mark it as a dup. I wish I could tell you an ETA on when it will be fixed. The fact that you cannot change the shortcuts is #741. #741 will be fixed as part of nx-libs (which includes the x2goagent package) 3.5.0.29. That new version of nx-libs should be out within days. -Mike#2

1 0

Bug#765: Workaround. And was this on Windows?
by Michael DePaulo 03 Mar '15

03 Mar '15

Hi Promox, Sorry to hear that you ran into this bug. Were you using X2Go Client for Windows? I reproduced it yesterday with X2Go Client for Windows 4.0.3.2-20150301. It appears that this occurs when the server does not have an ecdsa 256-bit key. Some Linux distros generate one by default, others do not. The workaround is to generate such a key: sudo ssh-keygen -f /etc/ssh/ssh_host_ecdsa_key -N '' -t ecdsa -b 256 I think this is a bug in terms of how x2goclient uses libssh -Mike#2

1 0

Bug#800: $X2GO_CLIENT not set
by Julius K 03 Mar '15

03 Mar '15

Package: <x2goserver> $ x2gostartagent The $X2GO_CLIENT environment variable is not set. Possible reasons: $SSH_CLIENT not set or $SSH_CONNECTION not set. Or $X2GO_CLIENT not set by ,,X2Go Desktop Sharing'' applet. Aborting session startup. I'm on Linux Miant 17 Qiana with the x2go/stable ppa. Please tell me what else you need.

2 1

Bug#799: x2golistdesktops returns nothing
by Anatoly Smaznov 03 Mar '15

03 Mar '15

Package: x2goserver Version: 4.0.1.19 I'm using x2go on Arch linux x86_64. This package https://www.archlinux.org/packages/extra/x86_64/x2goserver/ I can't use desktop sharing - client says that no local desktop found. After digging I found that `ss -lxu` returns nothing on my system. Replace with `ss -x` and it works now. Thanks!

2 1

Bug#789: reassign correctly
by Michael DePaulo 03 Mar '15

03 Mar '15

Control: reassign -1 x2goclient

1 0

Bug#789: This sounds grave
by Michael DePaulo 03 Mar '15

03 Mar '15

Control: severity -1 grave Control: affects -1 = x2goclient Control: tag -1 build-win32 HI Jozsef, Sorry to hear that you ran into this bug. I will look into it ASAP.

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev