Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Mike Gabriel <mike.gabriel-QcRmU36LScxyC2I0vPwN6RvVK+yQ3ZXh <at> public.gmane.org>
Subject: NX redistributed (3.5.0.21) released
Newsgroups: gmane.linux.terminal-server.x2go.announce
Date: Friday 30th August 2013 14:30:48 UTC (over 3 years ago)
Dear all,

the X2Go project is proud to announce a new release of the X2Go
component ,,nx-libs'' aka NX (redistributed).

New gains of this version of ,,nx-libs'' are:

   o Mostly build against distribution libraries only
   o Provide /etc/{nx,x2go}/keystrokes.cfg file reflecting the
     NX defaults.
   o Security issue: Fix calling setuid and setgid without setgroups or
     initgroups.


X2Go Component: nx-libs
Version: 2:3.5.0.21
Status: RELEASE
Date: Fri, 30 Aug 2013 16:18:04 +0200
Fixes these bug report(s): 199 223 238 293
Changes:
  nx-libs (2:3.5.0.21-0) RELEASED; urgency=low
.                                                                       
           [ Mike Gabriel ]
    * Provide a default keystrokes.cfg in /etc/nx (for nxagent) and
/etc/x2go
      (for x2goagent). (Fixes: #199).
    * Use a keystrokes.cfg that reflects the normally hard-coded defaults
of
      a vanilla nxagent. (Fixes: #223).
    * Set NXAGENT_KEYSTROKEFILE to /etc/x2go/keystrokes.cfg for wrapper
      x2goagent.
    * For vanilla nxagent move keystrokes.cfg from /etc/nx to /etc/nxagent.
    * Tarball roller script:
      + Only install keystrokes.cfg when in full mode.
      + Only install nxproxy wrapper when in lite mode.
    * /debian/control:
      + Add B-Ds: libfontconfig1-dev, libfontenc-dev.
    * /debian/nx-libs-dev.install:
      + Remove unrelated files from -dev package.
    * Fix keystrokes.cfg, use Ctrl+Alt+ instead of just Ctrl+.
(Adds
      to fixing #223).
  .
    [ Orion Poplawski ]
    * Change build options so that bundled libraries are not used anymore
at
      build time. Remove bundled libraries from rolled tarballs, as well.
      (Fixes: #238).
    * Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and
      setgid without setgroups or initgroups. There is a high probability
this
      means it didn't relinquish all groups, and this would be a potential
      security issue to be fixed. Seek POS36-C on the web for details about
      the problem. (Fixes: #293).


Regards,
Mike Gabriel

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: [email protected], http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
 
CD: 4ms