x2go-dev

x2go-dev@lists.x2go.org

5399 discussions

Bug#316: Can't see session icon in shadow sessions
by Ricardo Díaz Martín 30 Oct '13

30 Oct '13

Package: x2goclient Version: 4.1.0 Tag: patch When you launch a session using .desktop file (session saved as a launcher in the desktop) you can't see the tray icon though you choose this option in x2go settings Attaching patch to solve this issue.

3 7

Bug#335: X2Go issue (in src:python-x2go) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #335 pending fixed #335 0.4.0.9 thanks Hello, X2Go issue #335 (src:python-x2go) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=python-x2go.git;a=commitdiff;h=5b8164d The issue will most likely be fixed in src:python-x2go (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 5b8164de3596bd79e89de18e574252b2730b0916 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 18:36:06 2013 +0100 Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow data injections via ~/.*shrc files. (Fixes: #335). diff --git a/debian/changelog b/debian/changelog index eb4b587..cee5b48 100644 --- a/debian/changelog +++ b/debian/changelog @@ -19,6 +19,8 @@ python-x2go (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Implement two-factor authentication. - Compat fix in _paramiko monkey patch module to also work with early Paramiko versions. + - Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow + data injections via ~/.*shrc files. (Fixes: #335). [ Orion Poplawski ] * debian/control:

2 1

Bug#322: RDP connection through SSH proxy: Unable to execute: rdesktop
by Mathias Ewald 29 Oct '13

29 Oct '13

Package: x2goclient Version: 4.0.1.1-0 x2goclient session configuration: [20131009111725764] speed=2 pack=16m-jpeg quality=9 fstunnel=true export= iconvto=UTF-8 iconvfrom=ISO8859-1 useiconv=false fullscreen=false multidisp=false display=1 maxdim=false rdpclient=rdesktop directrdpsettings= width=800 height=600 dpi=86 setdpi=true xinerama=false usekbd=true layout=us type=pc105/us sound=false soundsystem=pulse startsoundsystem=true soundtunnel=true defsndport=true sndport=4713 print=false name=windows rdp test icon=:icons/128x128/x2gosession.png host=PUBLIC_IP user=mathias key= rdpport=3389 sshport=22 autologin=false krblogin=false directrdp=false rootless=false published=false applications=WWWBROWSER, MAILCLIENT, OFFICE, TERMINAL command=RDP rdpoptions= rdpserver=PRIVATE_IP xdmcpserver=localhost usesshproxy=true sshproxytype=SSH sshproxyuser=mathias sshproxykeyfile= sshproxyhost=PUBLIC_IP sshproxyport=22 sshproxysamepass=false sshproxysameuser=false sshproxyautologin=true uniquehostkeyaliases=0 setsessiontitle=0 sessiontitle= autostart=0 forwardsshagent=0 mimeboxaction=OPEN variant= mimeboxextensions= autoconnect=0 useexports=1 restoreexports=0 usemimebox=0 x2go client error message in GUI: "Unable to execute: rdesktop -g 800x600 PRIVATE_IP" but rdesktop is there: mathias@x220:~$ dpkg -l | grep rdesktop ii rdesktop 1.7.1-1 amd64 RDP client for Windows NT/2000 Terminal Server and Windows Servers mathias@x220:~$ which rdesktop /usr/bin/rdesktop mathias@x220:~$ x2go client debug output: mathias@x220:~$ x2goclient --debug x2go-INFO-1> "Starting x2goclient..." x2go-WARNING-1> "Can't load translator: :/x2goclient_en_us" x2go-WARNING-2> "Can't load translator: :/qt_en_US" x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-DEBUG-../onmainwindow.cpp:1133> Plugging apps in tray. x2go-INFO-3> "Started x2goclient." x2go-DEBUG-../onmainwindow.cpp:464> "$HOME=/home/mathias" x2go-DEBUG-../onmainwindow.cpp:2160> Reading 5 sessions from config file. x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-INFO-8> "Starting connection to server: 88.198.244.99:22" x2go-DEBUG-../onmainwindow.cpp:2796> Start new ssh connection to server:"88.198.244.99":"22" krbLogin: false x2go-DEBUG-../onmainwindow.cpp:2891> SSH connection established. x2go-DEBUG-../onmainwindow.cpp:3117> Continue normal x2go session x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-DEBUG-../onmainwindow.cpp:3940> Executing remote command: "X2GODPI=86 x2gostartagent 800x600 adsl 16m-jpeg-9 unix-kde-depth_24 us pc105/us 1 R RDP" x2go-DEBUG-../onmainwindow.cpp:4707> Agent output: "53 bf5828ddcf1e1409b3109a596ef1115a 8154 mathias-53-1381656965_stRRDP_dp24 30001 30002 30003 " x2go-DEBUG-../onmainwindow.cpp:5272> "Starting NX proxy, command: nxproxy -S nx/nx,options=/home/mathias/.x2go/S-mathias-53-1381656965_stRRDP_dp24/options:53" x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: " NXPROXY - Version 3.5.0 Copyright (C) 2001, 2010 NoMachine. See http://www.nomachine.com/ for more information. Info: Proxy running in client mode with pid '2723'. Session: Starting session at 'Sun Oct 13 10:58:47 2013'. Info: Connecting to remote host 'localhost:31001'. Info: Connection to remote proxy 'localhost:31001' established. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Info: Connection with remote proxy completed. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Warning: Unrecognized session type 'unix-kde-depth_24'. Assuming agent session. Info: Using ADSL link parameters 512/24/1/0. Info: Using cache parameters 4/4096KB/8192KB/8192KB. Info: Using pack method '16m-jpeg-9' with session 'unix-kde-depth_24'. Info: Using ZLIB data compression 1/1/32. Info: Using ZLIB stream compression 4/4. Info: No suitable cache file found. Info: Forwarding X11 connections to display ':0'. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Session: Session started at 'Sun Oct 13 10:58:48 2013'. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Info: Established X server connection. " x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Info: Using shared memory parameters 1/2048K. " x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Session: Terminating session at 'Sun Oct 13 10:58:49 2013'. Info: Your session was closed before reaching a usable state. Info: This can be due to the local X server refusing access to the client. Info: Please check authorization provided by the remote X application. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Session: Session terminated at 'Sun Oct 13 10:58:49 2013'. " x2go-DEBUG-../onmainwindow.cpp:5400> Deleting Proxy. x2go-DEBUG-../onmainwindow.cpp:5449> Waiting for proxy to exit. x2go-DEBUG-../onmainwindow.cpp:5469> Checking exit status. x2go-DEBUG-../onmainwindow.cpp:5520> Finished Proxy. x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:8578> "Command Message: X2GORUNCOMMAND ERR NOEXEC:rdesktop -g 800x600 10.173.20.13 " x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" ... cheers Mathias

3 4

Bug#332: RPM issue of the OSBD queues
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #332 rpm-packages thanks Hi Jan, can you take a look at issue #332 in X2Go BTS. Obviously, you should add something to the RPM package's init script of X2Go Server that resembles this [1]. Thanks, Mike [1] http://code.x2go.org/gitweb?p=x2goserver.git;a=blobdiff;f=debian/x2goserver… -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

4 9

Bug#311: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #311 pending fixed #311 4.0.1.2 thanks Hello, X2Go issue #311 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=1a4504a The issue will most likely be fixed in src:x2goclient (4.0.1.2). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 1a4504aefb145446c9011fb34743aa8535db3b7b Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 16:39:43 2013 +0100 Add option --broker-cacertfile. Allow usage of non-system-wide installed (self-signed) SSL certificate chains for https (SSL) session broker connections. (Fixes: #311). diff --git a/debian/changelog b/debian/changelog index e069591..78908d6 100644 --- a/debian/changelog +++ b/debian/changelog @@ -11,6 +11,9 @@ x2goclient (4.0.1.2-0~x2go2) UNRELEASED; urgency=low + Perform sanity checks on data that comes in from X2Go Servers. Prohibit the execution of arbitrary code via the ~/.bashrc file. (Fixes: #333). + + Add option --broker-cacertfile. Allow usage of non-system-wide + installed (self-signed) SSL certificate chains for https (SSL) + session broker connections. (Fixes: #311). * Pull-in packaging changes from Debian. [ Ricardo Díaz Martín ]

2 1

Bug#334: Don't allow users to override X2Go commands via ~/bin (or similar)
by Mike Gabriel 29 Oct '13

29 Oct '13

Package: x2goclient Severity: important In X2Go it is currently possible to replace every command in X2Go Server by a command of the same name in ~/bin. An attacker could use this to infiltrate X2Go Client with arbitrary data. IMHO, we should make sure, X2Go Client only uses system-wide paths when evoking commands on X2Go Servers. This, of course, will boycott installing X2Go Server into ~<user> space, but actually, I prefer a safe setup to such custom installation tweaks. Feedback?!? Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 2

Bug#333: Users can inject arbitrary data into X2Go Client via .bashrc
by Mike Gabriel 29 Oct '13

29 Oct '13

Hi All, Dan Halbert made me aware of it being easily possible to inject arbitrary data into X2Go Client via the server-side .bashrc file. This surely is a security problem in X2Go. Thus, I found that we really need to do some sanity checks on incoming output from X2Go Servers to avoid such injections. The idea is to invoke the server-side command with a UUID hash before and after the actuall command invocation: 1. execute server-side command from X2Go Client: ssh <user>@<server> sh -c "echo <uuidhash> && <x2gocmd> && echo <uuidhash> 2. read data from X2Go Server: X2GODATABEGIN:<uuidhash> <x2godata_line1> <x2godata_line2> .... <x2godata_lineN> X2GODATAEND:<uuidhash> 3. cut out the X2Go data returned by the server (in C++): QString begin_marker = "X2GODATABEGIN:"+uuid+"\n"; QString end_marker = "X2GODATAEND:"+uuid+"\n"; int output_begin=stdOutString.indexOf(begin_marker) + \\ begin_marker.length(); int output_end=stdOutString.indexOf(end_marker); output = stdOutString.mid(output_begin, \\ output_end-output_begin); I have a patch locally for this and will commit it in a minute. We can discuss the patch and move on from there when it's there. Unfortunately, this patch does not fix #327 as it is impossible to use scp with echoing .bashrc files. With this patch applied, the session starts, but setting up the SSHfs shares fails with locking up X2Go Client. For people who depend on echoing .bashrc files, please read my last post on #327. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 2

Bug#333: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #333 pending fixed #333 4.0.1.2 thanks Hello, X2Go issue #333 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=c121b7e The issue will most likely be fixed in src:x2goclient (4.0.1.2). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit c121b7e2d3d83abdc2d7a29637bc3294e38b2ec3 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 13:36:58 2013 +0100 Perform sanity checks on data that comes in from X2Go Servers. Prohibit the execution of arbitrary code via the ~/.bashrc file. (Fixes: #333). diff --git a/debian/changelog b/debian/changelog index e484ba5..e069591 100644 --- a/debian/changelog +++ b/debian/changelog @@ -8,6 +8,9 @@ x2goclient (4.0.1.2-0~x2go2) UNRELEASED; urgency=low + Store broker HTTPS certificate exceptions in $HOME/.x2go/ssl/exceptions (before: $HOME/ssl/exceptions). (Fixes: #328). + + Perform sanity checks on data that comes in from X2Go Servers. + Prohibit the execution of arbitrary code via the ~/.bashrc file. + (Fixes: #333). * Pull-in packaging changes from Debian. [ Ricardo Díaz Martín ]

3 3

Bug#327: x2go client crashes if .bashrc prints anything
by Dan Halbert 29 Oct '13

29 Oct '13

Package: x2goclient Version: 4.0.0.3 If I put an echo "testing" # exact text doesn't matter at the top of my .bashrc, then the x2goclient crashes immediately when trying to start a session. (The crash does not occur if I put a similar statement in .bash_login.) I have reproduced this on the Windows client; I believe a colleague saw it on both the Windows and Linux clients. The x2go server being used is 4.0.1.6-0~712~precise1.

3 5

Bug#321: X2Go issue (in src:pyhoca-gui) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #321 pending fixed #321 0.4.0.9 thanks Hello, X2Go issue #321 (src:pyhoca-gui) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=pyhoca-gui.git;a=commitdiff;h=299bb0e The issue will most likely be fixed in src:pyhoca-gui (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 299bb0ee83d70c6c98cbc834e7d876cdff27d91f Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 09:58:24 2013 +0100 Don't crash if no notification-daemon provide is registered in DBUS. (Fixes: #321). diff --git a/debian/changelog b/debian/changelog index 131085e..9abb3f9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -8,6 +8,8 @@ pyhoca-gui (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Support encrypted on SSH proxy whith password authentication on X2Go Server. - Implement two-factor authentication. + - Don't crash if no notification-daemon provide is registered in DBUS. + (Fixes: #321). * /debian/copyright: + Update file. Add entry for file icon2exe.py.

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev