X2Go Bug report logs - #1399
x2goserver gnupg server is hacked

version graph

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: Badr Elmers <badrelmers@gmail.com>

Date: Wed, 31 Jul 2019 06:05:01 UTC

Severity: normal

Found in version 4.1.0.3

Full log


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Received: (at submit) by bugs.x2go.org; 31 Jul 2019 06:04:59 +0000
From badrelmers@gmail.com  Wed Jul 31 08:04:58 2019
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.7 required=3.0 tests=BAYES_50,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,HTML_MESSAGE,SPF_HELO_NONE,
	URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.2
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 90A815DB06
	for <submit@bugs.x2go.org>; Wed, 31 Jul 2019 08:04:58 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id bpxhwhfoUx8L for <submit@bugs.x2go.org>;
	Wed, 31 Jul 2019 08:04:51 +0200 (CEST)
Received: from mail-io1-xd2a.google.com (mail-io1-xd2a.google.com [IPv6:2607:f8b0:4864:20::d2a])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 6ADD05DA8B
	for <submit@bugs.x2go.org>; Wed, 31 Jul 2019 08:04:51 +0200 (CEST)
Received: by mail-io1-xd2a.google.com with SMTP id g20so133722469ioc.12
        for <submit@bugs.x2go.org>; Tue, 30 Jul 2019 23:04:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20161025;
        h=mime-version:from:date:message-id:subject:to;
        bh=PvjxZAfs7NL+VRdMeaKKcwvaOqscwE5NEY6IC7VOqxo=;
        b=mL9/Dl6Is5jrT+XAKYPU8ElZ7zx2m9DRAaWuxny3iYZcdJfogHARyBBFLNrSb08ysu
         fDfesZRx5iw4Yf14lQ+h/SGv2vpSfHZUqea4Dsib3moueaN8w07FqJTKxWNvvY2C9ZnL
         995+IFXTLQoQ8q8JRomcc4CJHTQutfmanNE3ehVJ0cjLHWnSGIRRD9oeXrA5FE0qSuD1
         nuExzo7HZFvZErzaPRhQssEkxJOfdcerDGfJllpkuXASPhS0lLsKs+J//dfDSrJvFgHH
         cnO1nUulmSo4BrAmLDaDpikZbUUBElEQ5Ky5CAGobKx9VRfWr/UfIb6hdeAp+kgl9kfJ
         hjzQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=PvjxZAfs7NL+VRdMeaKKcwvaOqscwE5NEY6IC7VOqxo=;
        b=nwuC69WgkSZJzce4uvG43NagQa2F6eW92wuRGlI5sx5JL28OSuOAuGjAZMsU4OkxKh
         vJ3t9Lp7HarxqFlwNIJR8TknrXm+6Uso/QAEQhAZWGA9RwJZXrFcpzL5eiqKhI2TnJoV
         hNQAJpzFc0XQZcMoOcB9yh/J7ul34ofguYWmKt47xj9mTvVHSz8GG9NDQHNGAzJNqAqH
         YBfcOwkzQIG/CukU8gHmC6Sjsq6CxvdIpXkCZQ9qncGt8euCqGDZZCssW9AVtGE3Dehk
         flpycVbvL4Ld9GgFyJ58BiMTuCtSvTIDfwTPi50nln2a2CsHbLHHwCnB13RkNL2wAmWK
         pwCg==
X-Gm-Message-State: APjAAAWYXOH63lFUdf8EKHm4wTkSGPwwPuQRg/BMdaVbyphgZRLpzByv
	opC/gELFF2X4D6pOb9NDCMQBtEqU7NbVa0/QtkiDXKTA/LU=
X-Google-Smtp-Source: APXvYqwdljKYPTlcv6KqRmY7EHZgmlfBIxWhYJnjnk6Fb0rXmN073MLWRjrz6unjZV9Bmx6BcDd6IirlR/CsuV0anNk=
X-Received: by 2002:a6b:3b89:: with SMTP id i131mr59321717ioa.33.1564553089582;
 Tue, 30 Jul 2019 23:04:49 -0700 (PDT)
MIME-Version: 1.0
From: Badr Elmers <badrelmers@gmail.com>
Date: Wed, 31 Jul 2019 06:58:30 +0000
Message-ID: <CAJSX-XTwH9zrbU6pFo-FvUbXSqoCqmuN2omSFn8Mzm5qef04cg@mail.gmail.com>
Subject: x2goserver gnupg server is hacked
To: submit@bugs.x2go.org
Content-Type: multipart/alternative; boundary="000000000000230e4f058ef3e7d7"
[Message part 1 (text/plain, inline)]
Package: x2goserver
Version: 4.1.0.3

I follow this guide always to install x2go :
https://wiki.x2go.org/doku.php/wiki:repositories:debian
the guide says to use this command:
$ apt-key adv --recv-keys --keyserver keys.gnupg.net E1F958385BFE2B6E

but http://gnupg.net  is down and seems to have a serious problem, you can
see here
SKS Keyserver Network Under Attack
https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f

is there another way to install x2goserver without gnupg?
thanks
[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Sun Aug 9 00:43:28 2020; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.