tag #335 pending fixed #335 0.4.0.9 thanks Hello, X2Go issue #335 (src:python-x2go) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=python-x2go.git;a=commitdiff;h=5b8164d The issue will most likely be fixed in src:python-x2go (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 5b8164de3596bd79e89de18e574252b2730b0916 Author: Mike Gabriel <mike.gabriel@das-netzwerkteam.de> Date: Tue Oct 29 18:36:06 2013 +0100 Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow data injections via ~/.*shrc files. (Fixes: #335). diff --git a/debian/changelog b/debian/changelog index eb4b587..cee5b48 100644 --- a/debian/changelog +++ b/debian/changelog @@ -19,6 +19,8 @@ python-x2go (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Implement two-factor authentication. - Compat fix in _paramiko monkey patch module to also work with early Paramiko versions. + - Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow + data injections via ~/.*shrc files. (Fixes: #335). [ Orion Poplawski ] * debian/control:
Processing commands for control@bugs.x2go.org:
tag #335 pending Bug #335 [python-x2go] Users can inject arbitrary data into Pyhoca-GUI via .bashrc Ignoring request to alter tags of bug #335 to the same tags previously set fixed #335 0.4.0.9 Bug #335 [python-x2go] Users can inject arbitrary data into Pyhoca-GUI via .bashrc There is no source info for the package 'python-x2go' at version '0.4.0.9' with architecture '' Unable to make a source version for version '0.4.0.9' Marked as fixed in versions 0.4.0.9. thanks Stopping processing here.
335: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=335 X2Go Bug Tracking System Contact owner@bugs.x2go.org with problems