security update in Fedora 27 for nx-libs and x2goserver

Status: stable 2 years ago


  • Don't allow overriding of X.Org Server UNIX sockets via TEMP/NX_TEMP environment variables. Fixes problems on machines that use pam_tempdir.so.
  • Fix CVE-2017-2624 (timingsafe_memcmp) by Ulrich Sibiller.
  • Potentially improve LAN- and WAN-type connection speed settings scenarios. Includes a regression fix for VPN connections by Simon Matter.
  • Fix problems in mate-color-picker and potentially also other applications that make heavy use of RENDER trapezoids.


  • Fixed overzealous nxagent socket removal.
  • Keyboard mapping fixes, including preparation for usage with Arctica's nx-libs version (not supported in this version of X2Go Server, yet).
  • Support for Devuan and RT OS full desktop session spawning.
  • Always use short host name, don't rely on ${HOSTNAME} variable. Compatibility with non-bash login shells.
  • Spawn full desktop sessions with a new dbus user session instance.
  • Finnish translation update.
  • Added support for LXQt full desktop sessions.
  • New command: x2golistshadowsessions.

How to install

sudo dnf upgrade --advisory=FEDORA-2017-60c4aa0e01

Comments 10

This update has been submitted for testing by orion.

This update has been submitted for testing by orion.

orion edited this update.

New build(s):

  • x2goserver-
  • nx-libs-

Removed build(s):

  • nx-libs-
  • x2goserver-

Karma has been reset.

This update has been submitted for testing by orion.

This update has been pushed to testing.

no regressions noted

karma: +1

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

This update has been submitted for batched by orion.

This update has been submitted for stable by bodhi.

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
Test Gating
Submitted by
Update Type
Update Severity
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Autopush (time)
submitted 2 years ago
in testing 2 years ago
in stable 2 years ago
modified 2 years ago

Related Bugs 2

00 #1478974 x2go killed by systemd
00 #1510900 nx-libs- is available

Automated Test Results