Stefan Baur | 31 Jul 16:12 2015
Picon

X2Go Client for Windows (4.0.5.0-2015.07.31) released


(I'm posting this on behalf of Mike DePaulo, who is having some
technical issues with his e-mail program right now.)

----------------------------------------------------------------------

Dear all,

This is to announce a new release of X2Go Client for Windows:
4.0.5.0-2015.07.31

This is 1st release of X2Go Client 4.0.5.0 for Windows. There are no
changes since 4.0.5.0 itself; all of the changes are reflected in the
4.0.5.0 changelog. However, the 4.0.5.0 changelog lists certain
security updates that were already included in 4.0.4.0.2015.06.24. The
only security update since 4.0.4.0-2015.06.24 is the fix for OpenSSL
CVE-2015-1793.

The X2Go Project believes that X2Go Client for Windows
4.0.4.0-2015.06.24 and prior are affected by CVE-2015-1793 when
connecting to a session broker via HTTPS. Therefore, Windows users
that connect to session brokers via HTTPS are encouraged to upgrade to
4.0.5.0 ASAP.

Note that there will be no more updates, not even security updates, for
4.0.4.x. You *must* upgrade to 4.0.5.x to receive future security
updates.

Also, a very important change was made in order to fix bug #696. This
change means that many sessions started on X2Go Client for Windows
(Continue reading)

Mihai Moldovan | 28 Jul 21:43 2015
Picon

Python X2Go (0.5.0.4) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,python-x2go''.

New gains of this version of ,,python-x2go'' are:

  o "fuse" group does not exist anymore on Debian. Switch to checking for the
    "fusermount" binary and assume all users may use fuse if installed.
  o Debian packaging: make PyHoca-CLI/GUI co-installable with TheQVD client.
  o Misc. bugfixes.

X2Go Component: python-x2go
Version: 0.5.0.4
Status: RELEASE
Date: Tue, 28 Jul 2015 21:26:48 +0200
Changes:
 python-x2go (0.5.0.4) RELEASED; urgency=medium
 .
   [ Mike Gabriel ]
   * New upstream version (0.5.0.4):
     - No such constant loglevel_WARNING, must be logolevel_WARN.
     - End session gracefully if we fail setting up the SSH agent forwarding
       socket.
     - Don't check for "fuse" group membership to decide if a user can use
       sshfs.
       The "fuse" group has been dropped from Debian jessie and beyond.
       Furthermore, some openSUSE versions use the "trusted" group for granting
       (and never used a group named fuse).
   * debian/control:
(Continue reading)

Mihai Moldovan | 28 Jul 05:16 2015
Picon

X2Go Client 4.0.5.0 released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,x2goclient''.

New gains of this version of ,,x2goclient'' are:

  o Fixes for scdaemon - now also looks in /usr/lib/gnupg2/. The binary was
    moved to this location in Debian-based distributions.
  o All sh invocations now use bash.
  o Kerberos/GSSAPI fixes, most prominently for OS X.
  o Packaging changes to make parallel installations of X2Go Client and TheQVD
    client possible.
  o Drop unneeded DLL files on Windows.
  o lrelease calls simplified for better cross-compiling support.
  o [INCOMPATIBLE] Windows that are maximized on left-hand-side, secondary
    displays do not lose window decorations anymore. Thanks to Jon Turney for
    his help in debugging and fixing this issue.
  o [INCOMPATIBLE] Changing a display's resolution does not make window
    decorations disappear anymore. Thanks to Jon Turney for his help in
    debugging and fixing this issue.
  o [INCOMPATIBLE] Sessions started by the Windows-version of X2Go Client will
    now be resumable on Linux and OS X as well.

The X2Go Project thanks Henning Heinold and Jon Turney for their contributions.

*** IMPORTANT NOTICE FOR WINDOWS USERS ***
This release of X2Go Client may be incompatible with sessions started with
previous versions of X2Go Client.

(Continue reading)

Mihai Moldovan | 4 Jul 05:19 2015
Picon

NX redistributed (3.5.0.32) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,nx-libs''.

New gains of this version of ,,nx-libs'' are:

  o Proper integration of all patches in the source tarballs. Bugs in the
    tarball generation script and patch file names prohibited inclusion of many
    patches previously, including security fixes.
  o OS X build fixes.
  o Better support for debug (DEBUG, TEST, TRACE and other directives) builds,
    in part thanks to Nito Martinez.
  o Build fixes due to underlinking of libdl thanks to Bernard Cafarelli.
  o Retroactively document correct GPLv2 licensing of previously potentially
    offending DXPC code.
  o Help text fixups.
  o Restart reading if interrupted, gets rid of "Negotiation in stage 10"
    errors thanks to Vadim Troshchinskiy.
  o A dozen X.Org Server fixes backported by Ulrich Sibiller.

The X2Go Project thanks Bernard Cafarelli, Nito Martinez (Qindel Group), Vadim
Troshchinskiy (Qindel Group) and Ulrich Sibiller for their contributions.

X2Go Component: nx-libs
Version: 2:3.5.0.32
Status: RELEASE
Date: Sat, 04 Jul 2015 04:44:00 +0200
Fixes these bug report(s): 853 893
Changes:
(Continue reading)

Mike DePaulo | 26 Jun 05:09 2015
Picon

X2Go Client for Windows (4.0.4.0-2015.06.24) released


Dear all,

This is to announce a new release of X2Go Client for Windows:
4.0.4.0-2015.06.24

This is the 2nd release of X2Go Client 4.0.4.0 for Windows. The 1st
release was 4.0.4.0-2015.05.27 . The changes are relative to that releas
e.

The changes in this release are:
    - Windows: Update bundled Win32 OpenSSL from 1.0.1m to 1.0.1o,
      which fixes the multiple CVEs announced on 2015-06-11.
    - Windows: Update bundled Cygwin OpenSSL from 1.0.2a-1 to 1.0.2c-1,
      which fixes the multiple CVEs announced on 2015-06-11.
    - Windows: Update bundled VcXsrv from 1.17.0.0-1 (X2Go/Arctica
      Build) to 1.17.0.0-2 (X2Go/Arctica Build)
      The differences relevant to X2Go are:
        + VcXsrv's bundled version of openssl was updated from 1.0.2a
          to 1.0.2c (fixes the multiple CVEs announced on 2015-06-11)
Also,
    - There is now a build with a test fix for X2Go Bug #883.
      (Window Decorations gone when resuming on smaller screen)
      See the release notes link below for more details.

As with most vulnerabilities in 3rd party software, the X2Go project
has not done an analysis of whether X2Go Client was actually affected
by these vulnerabilities. However, as a precaution, we strongly
encourage all users to update.

(Continue reading)

Mihai Moldovan | 20 Jun 15:01 2015
Picon

X2Go Broker (0.0.3.0) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,x2gobroker''.

New gains of this version of ,,x2gobroker'' are:

  o SSH session broker support
  o x2gobroker binary now in resides in /usr/bin.
  o Crash fixes.
  o New option: broker-agent-query-mode -- configure agent query options per
    session.
  o More examples in x2gobroker-sessionprofiles.conf.
  o Add new authentication method 'none' -- always allows access without
    authentication.
  o Add new authentication method (auth_mech) 'https_get' -- authenticates
    against an HTTPS server.
  o New debugging tool: x2gobroker-daemon-debug.
  o Default backend is now 'inifile'.
  o New support for daemonizing HTTP broker and authservice programs.
    Daemonizing defaults to HTTP.
  o New systemd support.
  o SSH logging verbosity defaults to ERROR.
  o Autologin working with SSH proxy setups.
  o Documentation updates.
  o New load checker daemon.
  o Decouple host name from connection address.
  o New dynamic cookie authentication support (OTP support.)
  o New hooks infrastructure.
  o Now supports RPM-based distributions.
(Continue reading)

Mihai Moldovan | 19 Jun 23:17 2015
Picon

CUPS X2Go (3.0.1.3) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,cups-x2go''.

New gains of this version of ,,cups-x2go'' are:

  o Fix run time errors when executing cups-x2go.
  o Actually write content data, not a "random pointer value".
  o Simplify temp file creation/names: use one template for all generated
    temporary files.
  o Create temporary PDF and title (original file name) files with correct file
    name extensions.
  o Trust perl's File::Temp module to clean up temporary files once the script
    terminates.
  o Add proper perl core and module dependencies.

The X2Go Project thanks Helmer Teles and Thomas Feustel for their testing work.

X2Go Component: cups-x2go
Version: 3.0.1.3
Status: RELEASE
Date: Fri, 19 Jun 2015 23:02:53 +0200
Fixes these bug report(s): 887
Changes:
 cups-x2go (3.0.1.3) RELEASED; urgency=low
 .
   [ Mihai Moldovan ]
   * New upstream version (3.0.1.3):
     - cups-x2go: import tempfile() function from File::Temp module.
(Continue reading)

Mihai Moldovan | 14 Jun 19:14 2015
Picon

CUPS X2Go (3.0.1.2) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,cups-x2go''.

New gains of this version of ,,cups-x2go'' are:

  o Better support for RPM-based system. Directory
    owning has been minimized, dependencies added
    or changed to make them more appropriate.
    Documentation is now installed in the canonical
    directory.
  o Port script to File::Temp perl module to fix insecure
    use of temporary files.
  o Bugfix for Gentoo, where ps2pdf command line was not
    split up correctly.

This release fixes several security issues relating to improper use of temporary
files within the cups-x2go script.

The X2Go team especially thanks Jeremy "thrig" Mates <jmates@...> for
pointing out the problems.

All users of cups-x2go are encouraged to update as soon as possible.

X2Go Component: cups-x2go
Version: 3.0.1.2
Status: RELEASE
Date: Sun, 14 Jun 2015 18:09:54 +0200
Changes:
(Continue reading)

Mihai Moldovan | 8 Jun 17:40 2015
Picon

X2Go Fedora Package Archive: Provisioning of FC22 Packages

Dear all,

I am happy to announce that from now on the X2Go package archive that provides
Fedora packages of X2Go[1] also offers X2Go packages that have been built
against Fedora 22 - the new Fedora release version.

We hope this makes our package archive more useful.

If you encounter dependency problems when installing X2Go release or
nightly packages[2] under Fedora 22, please file a bug against X2Go BTS[3].

Mihai

[1] http://packages.x2go.org/fedora
[2] http://packages.x2go.org/fedora/x2go.repo
[3] http://wiki.x2go.org/doku.php/wiki:bugs

Dear all,

I am happy to announce that from now on the X2Go package archive that provides
Fedora packages of X2Go[1] also offers X2Go packages that have been built
against Fedora 22 - the new Fedora release version.

We hope this makes our package archive more useful.

If you encounter dependency problems when installing X2Go release or
nightly packages[2] under Fedora 22, please file a bug against X2Go BTS[3].

(Continue reading)

Mihai Moldovan | 7 Jun 16:27 2015
Picon

X2Go Debian Package Archive: Provisioning of stretch Packages

Dear all,

I am happy to announce that from now on the X2Go package archive that provides
Debian packages of X2Go[1] also offers packages of X2Go that have been built
against Debian stretch - the new Debian testing version.

Additionally, the "symbolic names"
  - oldstable => wheezy
  - stable => jessie
  - testing => stretch
have also been updated.

We hope this makes our package archive more useful.

If you encounter dependency problems when installing X2Go release[2] or
nightly[3] packages under Debian stretch, please file a bug against X2Go BTS[4].

Mihai

[1] http://packages.x2go.org/debian
[2] deb http://packages.x2go.org/debian stretch main
[3] deb http://packages.x2go.org/debian stretch heuler
[4] http://wiki.x2go.org/doku.php/wiki:bugs

Dear all,

I am happy to announce that from now on the X2Go package archive that provides
Debian packages of X2Go[1] also offers packages of X2Go that have been built
(Continue reading)

Mihai Moldovan | 7 Jun 03:16 2015
Picon

X2Go LXDE Bindings (1.0.2.4) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,x2golxdebindings''.

The changes listed below fix the dependencies when building RPM packages. If you
do not build from source and are not using RPM packages, you may skip this
release at your option.

New gains of this version of ,,x2golxdebindings'' are:

  o Build fix for RPM systems: RPM does not know the concept of "or"
    dependencies.
  o Build-time conflict on (Open-) SUSE resolved.
  o Typo fix in RPM dependencies making the binary package uninstallable.

X2Go Component: x2golxdebindings
Version: 1.0.2.4
Status: RELEASE
Date: Sun, 07 Jun 2015 03:11:26 +0200
Changes:
 x2golxdebindings (1.0.2.4) RELEASED; urgency=low
 .
   [ Mihai Moldovan ]
   * x2golxdebindings.spec:
     - Remove faulty "or" dependency, replace with libfm-*-based dependencies,
       which should automatically pull in GTK2 or GTK3. (Most likely GTK3
       anyway.)
     - Resolve conflict between primus and Mesa-libGL1 by ignoring primus.
     - Fix typo: "nuoveXT2-icon-them" instead of "nuoveXT2-icon-theme".
(Continue reading)


Gmane