[X2Go-Announcement] NX redistributed (3.5.0.21) released

[Mike Gabriel]

Dear all,

the X2Go project is proud to announce a new release of the X2Go
component ,,nx-libs'' aka NX (redistributed).

New gains of this version of ,,nx-libs'' are:

   o Mostly build against distribution libraries only
   o Provide /etc/{nx,x2go}/keystrokes.cfg file reflecting the
     NX defaults.
   o Security issue: Fix calling setuid and setgid without setgroups or
     initgroups.


X2Go Component: nx-libs
Version: 2:3.5.0.21
Status: RELEASE
Date: Fri, 30 Aug 2013 16:18:04 +0200
Fixes these bug report(s): 199 223 238 293
Changes:
  nx-libs (2:3.5.0.21-0) RELEASED; urgency=low
.                                                                       
           [ Mike Gabriel ]
    * Provide a default keystrokes.cfg in /etc/nx (for nxagent) and /etc/x2go
      (for x2goagent). (Fixes: #199).
    * Use a keystrokes.cfg that reflects the normally hard-coded defaults of
      a vanilla nxagent. (Fixes: #223).
    * Set NXAGENT_KEYSTROKEFILE to /etc/x2go/keystrokes.cfg for wrapper
      x2goagent.
    * For vanilla nxagent move keystrokes.cfg from /etc/nx to /etc/nxagent.
    * Tarball roller script:
      + Only install keystrokes.cfg when in full mode.
      + Only install nxproxy wrapper when in lite mode.
    * /debian/control:
      + Add B-Ds: libfontconfig1-dev, libfontenc-dev.
    * /debian/nx-libs-dev.install:
      + Remove unrelated files from -dev package.
    * Fix keystrokes.cfg, use Ctrl+Alt+<key> instead of just Ctrl+<key>. (Adds
      to fixing #223).
  .
    [ Orion Poplawski ]
    * Change build options so that bundled libraries are not used anymore at
      build time. Remove bundled libraries from rolled tarballs, as well.
      (Fixes: #238).
    * Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and
      setgid without setgroups or initgroups. There is a high probability this
      means it didn't relinquish all groups, and this would be a potential
      security issue to be fixed. Seek POS36-C on the web for details about
      the problem. (Fixes: #293).


Regards,
Mike Gabriel

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-announcements/attachments/20130830/f0359a66/attachment.pgp>