[X2go-dev] x2go security Issues

[Mike Gabriel]

Hi Kevin,

On Mo 14 Feb 2011 10:23:57 CET Kevin Moellering wrote:

> I would appreciate to know some kind of time frame when you are  
> planning to integrate the update into your repository, because we're  
> planning to install x2go on around 50 hosts of a PC pool at the RWTH  
> Aachen University. Since we do not want to go through the process of  
> checking out new sources, building them and installing them now and  
> then on every machine, we would like to use the deb-repository with  
> apt-get and not some git based source repository.

As the release model is currently not very transparent to outsiders  
(we are working on that) I recommend the following (in case you are in  
a hurry):

1. Mirror the following repositories

deb http://x2go.obviously-nice.de/deb lenny main
deb http://x2go.obviously-nice.de/deb heuler main

The heuler repository is testing upstream code that runs on ,,all''  
(let's see if there will be any objections to this) .deb based systems  
since Debian lenny (even Ubuntu hardy).

So testing in the heuler repos really refers to ,,upstream'' testing  
and it does not relate at all with any ,,testing'' repos in Debian or  
similar.

2. Once you have mirrored, disable automatic mirror sync

That is: currently the main packages (x2goclient(-qt), x2goserver,  
x2goserver-one etc., I am not talking about the thin client env and  
the KDE tools) need some more testing but I also use them for  
production (as a system administrator).

3. Install packages from your local mirror

4. Watch the x2go-dev and the x2go-announcement list for updates.  
Ideally new packages should be announced on  
x2go-announcement at lists.berlios.de.

Only last Saturday Heinz and I sat with Jonas Smedegaard (Debian  
developer) and we hope to provide packages in Debian within the next  
months (that will be for sid and wheezy).

Greets,
Mike


-- 

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

GnuPG Key ID 0xB588399B
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 489 bytes
Desc: Digitale PGP-Unterschrift
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20110214/fa9a10e9/attachment.pgp>