#1100 - xterm's shell started from x2goclient has wrong PATH

X2Go Bug report logs - #1100
xterm's shell started from x2goclient has wrong PATH

Reported by: Mark Dixon <m.c.dixon@leeds.ac.uk>

Date: Tue, 11 Oct 2016 15:05:01 UTC

Severity: normal

Tags: pending

Merged with 1018, 1199

Found in version 4.0.5.1

Fixed in versions 4.1.0.1, 4.1.1.0

Done: X2Go Release Manager X2Go Release Manager <git-admin@x2go.org>

Bug is archived. No further changes may be made.

Received: (at control) by bugs.x2go.org; 2 Apr 2017 13:02:09 +0000
From x2go@ymir.das-netzwerkteam.de  Sun Apr  2 15:02:00 2017
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-2.0 required=3.0 tests=ALL_TRUSTED,BAYES_00,
	DKIM_ADSP_CUSTOM_MED,FREEMAIL_FROM,NML_ADSP_CUSTOM_MED,URIBL_BLOCKED
	autolearn=no autolearn_force=no version=3.4.1
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 5FD765DB55;
	Sun,  2 Apr 2017 15:02:00 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id NEjKFofbazh9; Sun,  2 Apr 2017 15:01:53 +0200 (CEST)
Received: by ymir.das-netzwerkteam.de (Postfix, from userid 1005)
	id 150105DB5D; Sun,  2 Apr 2017 15:01:52 +0200 (CEST)
From: Mike DePaulo <mikedep333@gmail.com>
To: 1100-submitter@bugs.x2go.org
Cc: control@bugs.x2go.org, 1100@bugs.x2go.org
Subject: X2Go issue (in src:x2goclient) has been marked as pending for release
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
X-Mailer: http://snipr.com/post-receive-tag-pending
Message-Id: <20170402130153.150105DB5D@ymir.das-netzwerkteam.de>
Date: Sun,  2 Apr 2017 15:01:52 +0200 (CEST)

tag #1100 pending fixed #1100 4.1.0.1 thanks Hello, X2Go issue #1100 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=d164a70 The issue will most likely be fixed in src:x2goclient (4.1.0.1). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit d164a700ba7e243f5038ef925208872f48f9c757 Author: Mike DePaulo <mikedep333@gmail.com> Date: Thu Mar 30 18:51:41 2017 -0400 Don't override PATH for the actual session or application command. Fixes: #1100 diff --git a/debian/changelog b/debian/changelog index 42c1e52..8e71aeb 100644 --- a/debian/changelog +++ b/debian/changelog @@ -180,6 +180,9 @@ x2goclient (4.1.0.1-0x2go1) UNRELEASED; urgency=medium default because the installation dir is not writeable by users) + CVE-2017-6542 was fixed + - Don't override PATH for the actual session or application + command. + Fixes: #1100 [ Seth Galitzer ] * New upstream version (4.1.0.1):

X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 15:32:06 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

X2Go Bug report logs - #1100 xterm's shell started from x2goclient has wrong PATH

X2Go Bug report logs - #1100
xterm's shell started from x2goclient has wrong PATH