FEDORA-2017-60c4aa0e01

security update in Fedora 27 for nx-libs and x2goserver

Status: stable a year ago

nx-libs 3.5.0.33:

  • Don't allow overriding of X.Org Server UNIX sockets via TEMP/NX_TEMP environment variables. Fixes problems on machines that use pam_tempdir.so.
  • Fix CVE-2017-2624 (timingsafe_memcmp) by Ulrich Sibiller.
  • Potentially improve LAN- and WAN-type connection speed settings scenarios. Includes a regression fix for VPN connections by Simon Matter.
  • Fix problems in mate-color-picker and potentially also other applications that make heavy use of RENDER trapezoids.

x2goserver 4.0.1.22:

  • Fixed overzealous nxagent socket removal.
  • Keyboard mapping fixes, including preparation for usage with Arctica's nx-libs version (not supported in this version of X2Go Server, yet).
  • Support for Devuan and RT OS full desktop session spawning.
  • Always use short host name, don't rely on ${HOSTNAME} variable. Compatibility with non-bash login shells.
  • Spawn full desktop sessions with a new dbus user session instance.
  • Finnish translation update.
  • Added support for LXQt full desktop sessions.
  • New command: x2golistshadowsessions.

Comments 10

This update has been submitted for testing by orion.

This update has been submitted for testing by orion.

orion edited this update.

New build(s):

  • x2goserver-4.0.1.22-2.fc27
  • nx-libs-3.5.0.33-4.fc27

Removed build(s):

  • nx-libs-3.5.0.33-1.fc27
  • x2goserver-4.0.1.21-1.fc27

Karma has been reset.

This update has been submitted for testing by orion.

This update has been pushed to testing.

no regressions noted

karma: +1

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for batched by orion.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
medium
Karma
+1
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Enabled
Autopush (time)
Disabled
Dates
submitted 2 years ago
in testing a year ago
in stable a year ago
modified a year ago

Related Bugs 2

00 #1478974 x2go killed by systemd
00 #1510900 nx-libs-3.5.0.33 is available

Automated Test Results