x2go-dev

x2go-dev@lists.x2go.org

2 participants
5403 discussions

[Secunia] X2Go Server Vulnerability Request for Details
by Secunia Research 27 Sep '13

27 Sep '13

Hello, We are currently processing release notes [1] for X2Go Server and are evaluating to issue a Secunia advisory for this. Please see the original document for details. For the benefit of our mutual customers, to properly evaluate the mentioned vulnerability, we would appreciate if you could provide us with additional information: * Can you provide any additional information about the fixed vulnerability? * Can you provide additional information with regards to the impact and the exploitability of the vulnerability (e.g. an attack vector)? * Are there any mitigating factors or recommended workarounds? Thank you in advance and kind regards, Dmitry Janushkevich References: [1] http://lists.berlios.de/pipermail/x2go-announcement/2013-May/000125.html -- With kind regards, Dmitry Janushkevich Security Specialist Secunia, Mikado House, Rued Langgaards Vej 8, 2300 Copenhagen S, Denmark. http://www.secunia.com Phone: +45 7020 5144 Fax: +45 7020 5145

2 1

Bug#307: x2goserver dependency breaks
by westlake 27 Sep '13

27 Sep '13

Package: x2goserver Version: 0.01 the python-paramiko package is incompatible with app/s on debian apt-cache policy python-paramiko python-paramiko: Installed: 1.11.0-0+wheezy~main~878~build1 Candidate: 1.11.0-0+wheezy~main~878~build1 Version table: *** 1.11.0-0+wheezy~main~878~build1 0 500 http://packages.x2go.org/debian/ wheezy/main amd64 Packages 100 /var/lib/dpkg/status 1.7.7.1-3.1 0 500 http://debian.bhs.mirrors.ovh.net/debian/ wheezy/main amd64 Packages python-paramiko from packages.x2go.org, for eg breaks mysql-workbench on debian.. I suppose I can try to divert or use Wheezy/sid, but I'd just like to share this info Since time is spent into making .deb files, why not simply have it available with debian directly? It can prevent the above problem :) http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=465821

3 5

Bug#307: Bug#307: x2goserver dependency breaks
by Mike Gabriel 27 Sep '13

27 Sep '13

Control: close -1 Hi Scott, On Fr 27 Sep 2013 20:45:03 CEST, westlake wrote: > The bug report 721733 I filed quite awhile ago, it shows all the > packages with the reportbug tool (edition#'s) The reason for it is in latest paramiko upstream (and got introduced two years ago). I have patched the paramiko version, we provide via our archive and also filed a pull request for paramiko upstream: https://github.com/paramiko/paramiko/pull/215 Closing this issue on X2Go BTS, as it now gets tracked and hopefully fixed elsewhere. I will also report the issue to the Debian maintainer of paramiko. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#312: New wiki account for Eugene San (eugenesan)
by Eugene San 26 Sep '13

26 Sep '13

Package: wiki.x2go.org Please create a wiki account for me. First name: Eugene Last name: San Account name: eugenesan

2 1

X2go vs xrdp
by Mathias Ewald 26 Sep '13

26 Sep '13

Hi, for a company I was tasked with comparing x2go vs xrdp. Unfortunately, information regarding performance is scarce at best ... What I have is that x2go provides a lot more config options like pack, * redirection etc. but absolutely nothing reliable on performance. Do you have any information for me? Did you conduct any tests? cheers Mathias

1 0

X2Go Server packages for Armel architecture
by Mike Gabriel 25 Sep '13

25 Sep '13

Hi all, I just got donated an ARM based microserver. I will use this opportunity to rebuild stable X2Go server-side packages for ARM. This will be Debian squeeze and wheezy only for now. As nx-libs is a huge code tree, I will get back to once it has finished building. No clue when. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

3 3

Bug#311: http broker: Add cmd-line option for loading self-signed root-CA certificates
by Mike Gabriel 24 Sep '13

24 Sep '13

Package: x2goclient Severity: wishlist Version: 4.0.1.1 Add a command line options that allows to load a self-signed / custom CA certificate that is used when accessing the HTTP session broker via https. For an example, see: http://www.thomaskeller.biz/blog/2009/01/03/ssl-verification-with-qt-and-a-… Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root
by Mike Gabriel 24 Sep '13

24 Sep '13

Package: x2goserver Severity: wishlist Currently, only the user owning a session can suspend/terminate that session. The super-user root should also be eligible to act on user sessions with those commands. This should work from any x2goserver (in a multi-node farm) and with SQLite and PostgreSQL db backend. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

3 5

Looking for keyboard shortcut to move a window in rootless mode on MS Windows
by Stefan Baur 23 Sep '13

23 Sep '13

Hi everyone, it seems that there is no obvious keyboard shortcut to open a window's menu (the one that appears when you click on the upper left corner of a window) when running X2Go in rootless (PubApp) mode on a Microsoft Windows client. So, is there one that just isn't obvious, or is there none at all? The problem I'm having is that from time to time, Adobe Reader thinks it's funny to pop up a print dialog window that is partially off-screen - including its title bar! Thus, there's no way to grab it with the mouse to reposition it. Right-clicking the entry in the task bar only offers an option to close the window, so no luck there either. -Stefan

2 4

Bug#310: X2Go issue (in src:x2goserver) has been marked as pending for release
by Mike Gabriel 23 Sep '13

23 Sep '13

tag #310 pending fixed #310 4.0.1.7 thanks Hello, X2Go issue #310 (src:x2goserver) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=91230bd The issue will most likely be fixed in src:x2goserver (4.0.1.7). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 91230bdaf3133ede8cd23612d4e6593b2c5a98cf Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Mon Sep 23 23:02:25 2013 +0200 With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). diff --git a/debian/changelog b/debian/changelog index ae4f45c..67d32e5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -16,6 +16,9 @@ x2goserver (4.0.1.7-0~x2go1) UNRELEASED; urgency=low (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). + - With PostgreSQL as session db backend, prevent the root user from + launching sessions. Also, prevent x2gouser_root from being added as a + PostgreSQL user. (Fixes: #310). * /debian/control: - Update LONG_DESCRIPTIONS. - Move xfonts-base from Recommends: field to Depends: field (bin:package

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev