close #337
thanks
Hello,
we are very hopeful that X2Go issue #337 reported by you
has been resolved in the new release (2:3.5.0.22) of the
X2Go source project »src:nx-libs«.
You can view the complete changelog entry of src:nx-libs (2:3.5.0.22)
below, and you can use the following link to view all the code changes
between this and the last release of src:nx-libs.
http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=b07b3cca09f5aa4a5c…
If you feel that the issue has not been resolved satisfyingly, feel
free to reopen this bug report or submit a follow-up report with
further observations described based on the new released version
of src:nx-libs.
Thanks a lot for contributing to X2Go!!!
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
X2Go Component: src:nx-libs
Version: 2:3.5.0.22-0x2go1
Status: RELEASE
Date: Sat, 04 Jan 2014 21:39:17 +0100
Fixes: 314 337 370
Changes:
nx-libs (2:3.5.0.22-0x2go1) RELEASED; urgency=low
.
[ Mirraz Mirraz ]
* Add patch: 603_nx-X11_compilation_warnings.full.patch. Fix 3 evident bugs:
one implicit function declaration issue and two array index out of bounds
issues. (Fixes: #314).
.
[ Mike Gabriel ]
* Add patch 604_nx-X11_recent-freetype-API.full.patch. Fix FTBFS against
recent (>= 2.5.0) libfreetype6 API.
* Refresh patch: 600_nx-X11+nxcompext+nxcompshad_unique-libnames.full.patch.
* Improve patch:
601_nx-X11_build-option-changes-to-not-use-bundled-libraries.full.patch.
Improvements taken from the current Fedora package. Thanks to Orion
Paplowski!!! Also adapt roll-tarball.sh do dropping more bundled
libraries.
* Rename patch: 302_nxagent_configurable-keystrokes.full.patch to
320_nxagent_configurable-keystrokes.full.patch.
* debian/source/format:
+ Switch to format 1.0.
* debian/control:
+ Add libfreetype6-dev to Build-Depends: field.
+ Drop symlinking libNX_xrandr for setting a custom LD_LIBRARY_PATH. Not in
use anymore and not recommended at all to have that.
+ Make sure all nx-libs components depend on the very same version.
* debian/rules:
+ Remove bundled libraries from source tree before building the package.
* nx-libs.spec:
+ Ship nx-libs.spec (RPM package definitions) in upstream project. (Thanks
to the Fedora package maintainers). File differs from the Fedora file
already.
+ Clear (Fedora package) changelog.
+ Use local tarball, don't expect ,,-full'' in tarball name.
+ The RPM macro for the linker flags does not exist on EPEL. Thus, hardcode
__global_ldflags macro for EPEL builds.
+ Enable Xinerama support for RPM packages. (Fixes: #370).
.
[ Clemens Lang ]
* Add patch 605_nxcomp_Types.h-dont-use-STL-internals-on-libc++.full.patch. Fix
FTBFS of nx-libs-lite on Mac OS X Mavericks. (Fixes: #337).
Hi all,
I have been noticed about a root exploit in X2Go Server code. This
vulnerability has been (hopefully) fixed in X2Go Server 4.0.1.10 (and
in the LTS release branch 4.0.0.8).
This issue has now been a CVE ID to. Please see below.
All distributors of X2Go Server, please provide package upgrades to
your distribution.
Thanks+Greets,
Mike
----- Weitergeleitete Nachricht von cve-assign(a)mitre.org -----
Datum: Sat, 4 Jan 2014 11:23:29 -0500 (EST)
Von: cve-assign(a)mitre.org
Betreff: Re: root exploit in X2Go Server
An: mike.gabriel(a)das-netzwerkteam.de
Cc: cve-assign(a)mitre.org
> this is to request or a CVE-ID. We have been reported and we have
> fixed a root exploit in X2Go Server.
>
> In versions of X2Go Server previous to 4.0.0.8 (LTS release branch)
> and previous to 4.0.1.10 (main release branch) a normal user could
> gain root access to X2Go Server machines.
>
> The vulnerability has been fixed by these commits
>
> http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=c2036a1152a7e57…
> http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=80ff6997550749a…
Use CVE-2013-7261 for this issue involving root access through the use
of shell metacharacters.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
----- Ende der weitergeleiteten Nachricht -----
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
tag #391 pending
fixed #391 4.0.1.11
thanks
Hello,
X2Go issue #391 (src:x2goserver) reported by you has been
fixed in X2Go Git. You can see the changelog below, and you can
check the diff of the fix at:
http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=0b67dd2
The issue will most likely be fixed in src:x2goserver (4.0.1.11).
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
commit 0b67dd24d737a1a13d83b9ebe1d429480a754fba
Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de>
Date: Sat Jan 4 11:46:29 2014 +0100
Fix x2gofm.desktop syntax. (Fixes: #391). x2goserver.spec: Enhance requirement of desktop-file-utils, validate x2gofm.desktop during package build.
diff --git a/debian/changelog b/debian/changelog
index 7e03fa5..e5869f4 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,10 @@
x2goserver (4.0.1.11-0x2go1) UNRELEASED; urgency=low
- * Continue development on stable branch of X2Go Server...
+ * New upstream version (4.0.1.11):
+ - Fix x2gofm.desktop syntax. (Fixes: #391).
+ * x2goserver.spec:
+ - Enhance requirement of desktop-file-utils, validate x2gofm.desktop
+ during package build.
-- Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Sat, 04 Jan 2014 11:29:35 +0100
goodnight
I have this problem when running the plugin in ubuntu 12.04 lts x2go, also have
the same problem intentanto accessed from windows8
please help with this problem
thank you very much
att: Dario Fernando Zarama Rivadeneira
As Roderick Johnstone has noted in
https://bugzilla.redhat.com/show_bug.cgi?id=1033876, the NX code appears
to require a keymap.dir file to locate a keymap directory (see
NXVerifyXkbBaseDirectory in
nx-libs-3.5.0.21/nx-X11/programs/Xserver/xkb/ddxLoad.c). This is no
longer required by even RHEL6 xorg code and so is not provided there or
in Fedora.
So it looks like I'm going to need to have the Fedora nxagent rpm
provide /usr/share/X11/xkb/keymap.dir.
Does this seem correct?
--
Orion Poplawski
Technical Manager 303-415-9701 x222
NWRA/CoRA Division FAX: 303-415-9702
3380 Mitchell Lane orion(a)cora.nwra.com
Boulder, CO 80301 http://www.cora.nwra.com
Hi,
I haven't really checked this out myself, but a friend pointed me at
http://theqvd.com/blog/qvd-client-for-android-1-0-release
According to him, this is also some kind of NoMachine NX fork, their
code is available under GPL, and they have a working (though still Beta)
Android client.
Maybe it's possible to use their code as a basis for an X2Go Android Client?
-Stefan
Package: x2goserver
Version: 4.0.1.10
Severity: wishlist
Tag: deb-packages
Tag: rpm-packages
Provide meta packages that pull in all recommended/required packages
for specific desktop shells (e.g. x2goserver-gnome2, x2goserver-lxde,
etc.).
Mike
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Control: close -1
Hi Schlomo,
On Mo 30 Dez 2013 14:36:55 CET, Schlomo Schapiro wrote:
> Package: wiki.x2go.org
>
> Please create a wiki account for me.
>
> First name:
> Schlomo
> L
> ast name:
> Schapiro
> Account name:
> schlomo
> GPG-Fingerprint: BC41 11AB 3732 C5AA 28C6 31B1 9177 12AC 9E62 229E
The account has just been created. You should have received your
credentials in a separate encrypted mail.
Mike
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…