tag #293 pending
fixed #293 2:3.5.0.21
thanks
Hello,
X2Go issue #293 (src:nx-libs) reported by you has been
fixed in X2Go Git. You can see the changelog below, and you can
check the diff of the fix at:
http://code.x2go.org/gitweb?p=nx-libs.git;a=commitdiff;h=0946b43
The issue will most likely be fixed in src:nx-libs (2:3.5.0.21).
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
commit 0946b437570dea31365790d5cbf39c39f1b59c02
Author: Mike Gabriel <mike.gabr...@das-netzwerkteam.de>
Date: Thu Aug 29 22:24:26 2013 +0200
Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and setgid
without setgroups or initgroups. There is a high probability this means it
didn't relinquish all groups, and this would be a potential security issue to
be fixed. Seek POS36-C on the web for details about the problem. (Fixes: #293).
diff --git a/debian/changelog b/debian/changelog
index 2242a75..b523ee1 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -19,6 +19,11 @@ nx-libs (2:3.5.0.21-0) UNRELEASED; urgency=low
* Change build options so that bundled libraries are not used anymore at
build time. Remove bundled libraries from rolled tarballs, as well. (Fixes:
#238).
+ * Add patch: 602_nx-X11_initgroups.full.patch. Fix calling setuid and setgid
+ without setgroups or initgroups. There is a high probability this means it
+ didn't relinquish all groups, and this would be a potential security issue
+ to be fixed. Seek POS36-C on the web for details about the problem. (Fixes:
+ #293).
-- Mike Gabriel <mike.gabr...@das-netzwerkteam.de> Thu, 28 Mar 2013 21:07:42
+0100
_______________________________________________
X2Go-Dev mailing list
X2Go-Dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/x2go-dev
