From ionic@ionic.de Fri Dec 20 19:06:25 2019 Received: (at 1429) by bugs.x2go.org; 20 Dec 2019 18:06:28 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-2.0 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_HELO_NONE,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.2 Received: from mail.ionic.de (ionic.de [IPv6:2001:41d0:a:588b:1::2]) by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 2CED25DAE7 for <1429@bugs.x2go.org>; Fri, 20 Dec 2019 19:06:22 +0100 (CET) Received: from [10.30.44.19] (178.162.222.41.adsl.inet-telecom.org [178.162.222.41]) by mail.ionic.de (Postfix) with ESMTPSA id 29F0A4F07479; Fri, 20 Dec 2019 18:06:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default; t=1576865181; bh=6AgbV/qoXIy0X66TIaTOOZ6pR6mzNgCg9KxAaraiPJs=; h=To:References:From:Subject:Date:In-Reply-To:From; b=M56M1fOtM/cChhe7QhbZSGlGPRUtpbd9/HdmxO4PZBSnAQO2Z1ihuz7bEFWoYR/KN d/DKTia+dE471DkGGSEbEyXsGz4gXmXjJrRLVfN1jY9yJ/Kcx/Zttz1WU6qhjS0ahK mW9lKxuRPlTsF5MT2P2VtRgZ2aq0onYf/FW8tz6I= To: Sylvain Cuaz , 1429@bugs.x2go.org References: From: Mihai Moldovan Autocrypt: addr=ionic@ionic.de; prefer-encrypt=mutual; keydata= mQINBEjok5sBEADlDP0MwtucH6BJN2pUuvLLuRgVo2rBG2TsE/Ijht8/C4QZ6v91pXEs02m0 y/q3L/FzDSdcKddY6mWqplOiCAbT6F83e08ioF5+AqBs9PsI5XwohW9DPjtRApYlUiQgofe9 0t9F/77hPTafypycks9buJHvWKRy7NZ+ZtYv3bQMPFXVmDG7FXJqI65uZh2jH9jeJ+YyGnBX j82XHHtiRoR7+2XVnDZiFNYPhFVBEML7X0IGICMbtWUd/jECMJ6g8V7KMyi321GP3ijC9ygh 3SeT+Z+mJNkMmq2ii6Q2OkE12gelw1p0wzf7XF4Pl014pDp/j+A99/VLGyJK52VoNc8OMO5o gZE0DldJzzEmf+xX7fopNVE3NYtldJWG6QV+tZr3DN5KcHIOQ7JRAFlYuROywQAFrQb7TG0M S/iVEngg2DssRQ0sq9HkHahxCFyelBYKGAaljBJ4A4T8DcP2DoPVG5cm9qe4jKlJMmM1JtZz jNlEH4qp6ZzdpYT/FSWQWg57S6ISDryf6Cn+YAg14VWm0saE8NkJXTaOZjA+7qI/uOLLTUaa aGjSEsXFE7po6KDjx+BkyOrp3i/LBWcyClfY/OUvpyKT5+mDE5H0x074MTBcH9p7Zdy8DatA Jryb0vt2YeEe3vE4e1+M0kn8QfDlB9/VAAOmUKUvGTdvVlRNdwARAQABtB9NaWhhaSBNb2xk b3ZhbiA8aW9uaWNAaW9uaWMuZGU+iQJfBBMBCABJAhsjAh4BAheAAhkBCwsKDQkMCAsHAQMC BxUKCQgLAwIFFgIDAQAWIQRuEdCPdTOBx0TxyDwf1i7ZbiU6hwUCXXpwdAUJFobW2QAKCRAf 1i7ZbiU6h1jEEACbB5FC6bqrLEWwqG2du2md+OoJQkTiuBaC4iv+CtiB5dJclteJWEszryVx zAeHmegCQH5JXgZB7KQiZs1V+tH2KFF9z1dUArnL8dygD8wvDWUbhVbRx3HdU25qfHOmmCdH xy5GKBqLXAiwYowIEudJiPwKm59OzsLBj6aDHLq2GmPdgs0f270g2lvUY0rNTYfUh7NAw0Zg DyVvknhekOgL4cPX9U43cqVcE6nNa5mcSSCSeBwSQGIdpcIGQK+msShXVQ1FjoEQbYUPCkpg R+M6qpsTTv18CiMCyoA2bGMthGcX2zy+CY1W5/UgRNcgzb1mS5uzWV7QCU17qo9d+3LsFYhI 2PHHoE3LjZYUMI03nAmcJxqmg6l2frdzukn5B+Pn5Xwc0+3Q5AEoab0mY9j0AlcZoODoBoqr lrgjls4pMlB4Ye+sUx7NVU3kFOprRv8vA/P3LsuJfSm9TniDN/BN+dOo1K2miNBnEErEO3D2 iFeFPihpSirv5Yf+qN8ClixJMGFHrvB/gxlNTz4GfvdgQjTjxzoeeIPwT8F4FwVm6wSFFlvc LsVprvPktqr+zEJU+5FIUXvBluKToCPVtazab3LKYi6JGUjVBUUrqsJAUwnxCe3ClIxl43w9 FGiGVzo70ZL3lAfSCoI3TR91EUMs90Ct7zQaTxCzHuhR//SgrbQWSW9uaWMgPGlvbmljQGlv bmljLmRlPokCXAQTAQgARgIbIwIeAQIXgAsLCg0JDAgLBwEDAgcVCgkICwMCBRYCAwEAFiEE bhHQj3UzgcdE8cg8H9Yu2W4lOocFAl16cHUFCRaG1tkACgkQH9Yu2W4lOofrQQ/9EnYF6/ug GYMdBbz4DDQmL07N0rEFjPu0XyhNjEKBNkvh8YuoIOWdPZ92xUDuiIMA1rTGEBWQAjKK0khs eV/c0boiojBp4LvELhbYEZCVKYl2gW/NnRF/ifLf6IZ0i6mOCe6A1UE+tn64JLzE36N9Rxaa VNgnnAVJdIWehR7iJ3RnPC7ryDp4I69qHnpPpPh5ga/kGaBGrbQRkk8FqNGSxVrO7dq9rr3q BGFPe3r08mE0d9MehOok5efogjSxIubKYJT4M7vz+m/D5d9Dze1RCKMs6BCh2028d7BYXcr2 Xk0j2JUxrDwe9zk0LR7P17l59l6Msyinf1F7j5gRysaE0ncVcA6JL7T638db4Z/4oJefXZPF 4bdqclCscADcT8L7gCtW3F8GR7KCyUWReS243E3sdL/jqFnlcKb5Rs2I8G4Vebfx3N1DuvdM v+DOy/XJvUTviWxBFyLkgwrfiFRJwGhOAgFm3aeSwelnZBiAdDwosvjx4rW6wxoMA9lKwKFr 92uTiH1A/X3JhUXpGU7EOjnf+ynXuL3bwsS1jQGS22jmPiKbudwHUQ5ZqJXkHYvtBUP5rWCT S8cqQNLC2pHdQR2ruAwtkfDpp00FcnGcrxYDy/CewiOXnIem53r4dzHk34CjeVwqdjfGyDnB YgrCp8gKjCRIq+vzlLYxUtX5NxC5Ag0ESOiTmwEQAPD65JnvgT8EampZZpjVLlgvGLfiel42 AB/lH9JPx+jCwO2fmS/AB0PtDd9Oq/2BVZ8Nko4Wgzg8IUaDL3TiraCHCWfS9C0ALYs4WTGx wm/gjLXHsxmV2pl16ZNdE862yPYJ0Ts9cQZ05M6bjpIKONx0cexrmMvopjOC8Yf4X4ETOjBY 0JXCLFHdFBkQsbqvEJsUakKUaLoAsD3l43znjEZGkFCOwPJCye205ks4wfX0gb+t2+22o4RR 4ndQjmBntxGTmEYtUU825U56thXb/gTf73v/QXWYAKX0Ul/EJLi7LmRfTlh8SLN8MKb6haMg V0dvQqoK3EBRQPy5t4v3Xt5BblyVFRU2DOLS8FfOSfchrSup1LAP7+i13Gkxq0PT96yd4lT2 CrshdsPCDKrxU5x7uvpwrwScS8pjrGCRTeFv+U2HVpNYXSGJpjZTPzx/kVi/M/tVlmYGTgTx SdBUEGw70zD+ptPxmU9WRVFaARvxQIiEPVA5fIEbBn3tMEuoM5Nnr13gGUMmQootw54uw4ti o2j6Z5f9Re2Xpbnm+1W4HaD0ZjQ/axYsSOmxQuMo5Upy+YsCIlCw5CwyTeZXERyORTv+m88F UoB5iPnjJTQP4crHU7afQIxO1ZFcXgvUyfpBGQ7+VVE0sVKTbFo/dtj5F/u/BGDzxkzhuMce zzKnABEBAAGJAjwEGAEIACYCGwwWIQRuEdCPdTOBx0TxyDwf1i7ZbiU6hwUCXXpwzgUJFobX MwAKCRAf1i7ZbiU6hyjNEADVXKjr9oeRgKlizeeflbqXb8rNzNFnB9bDYiFWwC1j49ACI46H OXaattvEAKlfYOMMyhbsYsICwat0jTFifXbXe65/BEWe7LHyRNj8d5k0fxUq5IicRmxvmMOC Ov2pwk1uIMdOD1KFpIK73vB2EIC1EJVBenFyz2WOW1saelfnL5dwhDMAck2yVIppXe+QKfVH zEIfyun9MaRBoBG3eqA3mSE+nyuJvbaIa6/VMXUCgkEzbAzzTts9sc6+3AAjmy7ruwE5q58i 72uWq2P0x/hf12c4MbISCxGz1kDBH1xSdy4Gu5JrIdlMbnB5m+s/25/DJUTFHKBadHKjyVCW 2py32fsgW06XJWrxFU9YIvgtkqpPILgNP+ey9Leuw85ugxFDNooaloDRHhoZ01B6HxbVmnoO wRv9oh9tohIbgg0EjEfCiismsysWeXdQh6QIMrMQbmjrfPtBpCApy5kYjtOBs16EOfBVJwno E11rVGq34LsEGx1fqJMr82awMI6u50tz7F1MQcVMvWoLDnkwyE5YviKHy1xmV793ByprMcbH z4/sc61J4EHABPxM+OTjrD1tniaMkLHVa5daJJoxVwKetu7voqhS1WKYUiYYezUUzQNoV7lQ O3CFNqnsEZNUM2wyub2f02n0pdzJazBP2zbdJHjTAP14TT9s/dPH9VNQ7bkCDQRI6JObARAA 8Prkme+BPwRqallmmNUuWC8Yt+J6XjYAH+Uf0k/H6MLA7Z+ZL8AHQ+0N306r/YFVnw2SjhaD ODwhRoMvdOKtoIcJZ9L0LQAtizhZMbHCb+CMtcezGZXamXXpk10TzrbI9gnROz1xBnTkzpuO kgo43HRx7GuYy+imM4Lxh/hfgRM6MFjQlcIsUd0UGRCxuq8QmxRqQpRougCwPeXjfOeMRkaQ UI7A8kLJ7bTmSzjB9fSBv63b7bajhFHid1COYGe3EZOYRi1RTzblTnq2Fdv+BN/ve/9BdZgA pfRSX8QkuLsuZF9OWHxIs3wwpvqFoyBXR29CqgrcQFFA/Lm3i/de3kFuXJUVFTYM4tLwV85J 9yGtK6nUsA/v6LXcaTGrQ9P3rJ3iVPYKuyF2w8IMqvFTnHu6+nCvBJxLymOsYJFN4W/5TYdW k1hdIYmmNlM/PH+RWL8z+1WWZgZOBPFJ0FQQbDvTMP6m0/GZT1ZFUVoBG/FAiIQ9UDl8gRsG fe0wS6gzk2evXeAZQyZCii3Dni7Di2KjaPpnl/1F7Zelueb7VbgdoPRmND9rFixI6bFC4yjl SnL5iwIiULDkLDJN5lcRHI5FO/6bzwVSgHmI+eMlNA/hysdTtp9AjE7VkVxeC9TJ+kEZDv5V UTSxUpNsWj922PkX+78EYPPGTOG4xx7PMqcAEQEAAYkCPAQYAQgAJgIbDBYhBG4R0I91M4HH RPHIPB/WLtluJTqHBQJdenDOBQkWhtczAAoJEB/WLtluJTqHKM0QANVcqOv2h5GAqWLN55+V updvys3M0WcH1sNiIVbALWPj0AIjjoc5dpq228QAqV9g4wzKFuxiwgLBq3SNMWJ9dtd7rn8E RZ7ssfJE2Px3mTR/FSrkiJxGbG+Yw4I6/anCTW4gx04PUoWkgrve8HYQgLUQlUF6cXLPZY5b Wxp6V+cvl3CEMwByTbJUimld75Ap9UfMQh/K6f0xpEGgEbd6oDeZIT6fK4m9tohrr9UxdQKC QTNsDPNO2z2xzr7cACObLuu7ATmrnyLva5arY/TH+F/XZzgxshILEbPWQMEfXFJ3Lga7kmsh 2UxucHmb6z/bn8MlRMUcoFp0cqPJUJbanLfZ+yBbTpclavEVT1gi+C2Sqk8guA0/57L0t67D zm6DEUM2ihqWgNEeGhnTUHofFtWaeg7BG/2iH22iEhuCDQSMR8KKKyazKxZ5d1CHpAgysxBu aOt8+0GkICnLmRiO04GzXoQ58FUnCegTXWtUarfguwQbHV+okyvzZrAwjq7nS3PsXUxBxUy9 agsOeTDITli+IofLXGZXv3cHKmsxxsfPj+xzrUngQcAE/Ez45OOsPW2eJoyQsdVrl1okmjFX Ap627u+iqFLVYphSJhh7NRTNA2hXuVA7cIU2qewRk1QzbDK5vZ/TafSl3MlrME/bNt0keNMA /XhNP2z908f1U1DtuQINBEjok5sBEADw+uSZ74E/BGpqWWaY1S5YLxi34npeNgAf5R/ST8fo wsDtn5kvwAdD7Q3fTqv9gVWfDZKOFoM4PCFGgy904q2ghwln0vQtAC2LOFkxscJv4Iy1x7MZ ldqZdemTXRPOtsj2CdE7PXEGdOTOm46SCjjcdHHsa5jL6KYzgvGH+F+BEzowWNCVwixR3RQZ ELG6rxCbFGpClGi6ALA95eN854xGRpBQjsDyQsnttOZLOMH19IG/rdvttqOEUeJ3UI5gZ7cR k5hGLVFPNuVOerYV2/4E3+97/0F1mACl9FJfxCS4uy5kX05YfEizfDCm+oWjIFdHb0KqCtxA UUD8ubeL917eQW5clRUVNgzi0vBXzkn3Ia0rqdSwD+/otdxpMatD0/esneJU9gq7IXbDwgyq 8VOce7r6cK8EnEvKY6xgkU3hb/lNh1aTWF0hiaY2Uz88f5FYvzP7VZZmBk4E8UnQVBBsO9Mw /qbT8ZlPVkVRWgEb8UCIhD1QOXyBGwZ97TBLqDOTZ69d4BlDJkKKLcOeLsOLYqNo+meX/UXt l6W55vtVuB2g9GY0P2sWLEjpsULjKOVKcvmLAiJQsOQsMk3mVxEcjkU7/pvPBVKAeYj54yU0 D+HKx1O2n0CMTtWRXF4L1Mn6QRkO/lVRNLFSk2xaP3bY+Rf7vwRg88ZM4bjHHs8ypwARAQAB iQI8BBgBCAAmAhsMFiEEbhHQj3UzgcdE8cg8H9Yu2W4lOocFAl16cM4FCRaG1zMACgkQH9Yu 2W4lOocozRAA1Vyo6/aHkYCpYs3nn5W6l2/KzczRZwfWw2IhVsAtY+PQAiOOhzl2mrbbxACp X2DjDMoW7GLCAsGrdI0xYn1213uufwRFnuyx8kTY/HeZNH8VKuSInEZsb5jDgjr9qcJNbiDH Tg9ShaSCu97wdhCAtRCVQXpxcs9ljltbGnpX5y+XcIQzAHJNslSKaV3vkCn1R8xCH8rp/TGk QaARt3qgN5khPp8rib22iGuv1TF1AoJBM2wM807bPbHOvtwAI5su67sBOaufIu9rlqtj9Mf4 X9dnODGyEgsRs9ZAwR9cUncuBruSayHZTG5weZvrP9ufwyVExRygWnRyo8lQltqct9n7IFtO lyVq8RVPWCL4LZKqTyC4DT/nsvS3rsPOboMRQzaKGpaA0R4aGdNQeh8W1Zp6DsEb/aIfbaIS G4INBIxHwoorJrMrFnl3UIekCDKzEG5o63z7QaQgKcuZGI7TgbNehDnwVScJ6BNda1Rqt+C7 BBsdX6iTK/NmsDCOrudLc+xdTEHFTL1qCw55MMhOWL4ih8tcZle/dwcqazHGx8+P7HOtSeBB wAT8TPjk46w9bZ4mjJCx1WuXWiSaMVcCnrbu76KoUtVimFImGHs1FM0DaFe5UDtwhTap7BGT VDNsMrm9n9Np9KXcyWswT9s23SR40wD9eE0/bP3Tx/VTUO25Ag0ESOiTmwEQAPD65JnvgT8E ampZZpjVLlgvGLfiel42AB/lH9JPx+jCwO2fmS/AB0PtDd9Oq/2BVZ8Nko4Wgzg8IUaDL3Ti raCHCWfS9C0ALYs4WTGxwm/gjLXHsxmV2pl16ZNdE862yPYJ0Ts9cQZ05M6bjpIKONx0cexr mMvopjOC8Yf4X4ETOjBY0JXCLFHdFBkQsbqvEJsUakKUaLoAsD3l43znjEZGkFCOwPJCye20 5ks4wfX0gb+t2+22o4RR4ndQjmBntxGTmEYtUU825U56thXb/gTf73v/QXWYAKX0Ul/EJLi7 LmRfTlh8SLN8MKb6haMgV0dvQqoK3EBRQPy5t4v3Xt5BblyVFRU2DOLS8FfOSfchrSup1LAP 7+i13Gkxq0PT96yd4lT2CrshdsPCDKrxU5x7uvpwrwScS8pjrGCRTeFv+U2HVpNYXSGJpjZT Pzx/kVi/M/tVlmYGTgTxSdBUEGw70zD+ptPxmU9WRVFaARvxQIiEPVA5fIEbBn3tMEuoM5Nn r13gGUMmQootw54uw4tio2j6Z5f9Re2Xpbnm+1W4HaD0ZjQ/axYsSOmxQuMo5Upy+YsCIlCw 5CwyTeZXERyORTv+m88FUoB5iPnjJTQP4crHU7afQIxO1ZFcXgvUyfpBGQ7+VVE0sVKTbFo/ dtj5F/u/BGDzxkzhuMcezzKnABEBAAGJAjwEGAEIACYCGwwWIQRuEdCPdTOBx0TxyDwf1i7Z biU6hwUCXXpwzgUJFobXMwAKCRAf1i7ZbiU6hyjNEADVXKjr9oeRgKlizeeflbqXb8rNzNFn B9bDYiFWwC1j49ACI46HOXaattvEAKlfYOMMyhbsYsICwat0jTFifXbXe65/BEWe7LHyRNj8 d5k0fxUq5IicRmxvmMOCOv2pwk1uIMdOD1KFpIK73vB2EIC1EJVBenFyz2WOW1saelfnL5dw hDMAck2yVIppXe+QKfVHzEIfyun9MaRBoBG3eqA3mSE+nyuJvbaIa6/VMXUCgkEzbAzzTts9 sc6+3AAjmy7ruwE5q58i72uWq2P0x/hf12c4MbISCxGz1kDBH1xSdy4Gu5JrIdlMbnB5m+s/ 25/DJUTFHKBadHKjyVCW2py32fsgW06XJWrxFU9YIvgtkqpPILgNP+ey9Leuw85ugxFDNooa loDRHhoZ01B6HxbVmnoOwRv9oh9tohIbgg0EjEfCiismsysWeXdQh6QIMrMQbmjrfPtBpCAp y5kYjtOBs16EOfBVJwnoE11rVGq34LsEGx1fqJMr82awMI6u50tz7F1MQcVMvWoLDnkwyE5Y viKHy1xmV793ByprMcbHz4/sc61J4EHABPxM+OTjrD1tniaMkLHVa5daJJoxVwKetu7voqhS 1WKYUiYYezUUzQNoV7lQO3CFNqnsEZNUM2wyub2f02n0pdzJazBP2zbdJHjTAP14TT9s/dPH 9VNQ7bkCDQRI6JObARAA8Prkme+BPwRqallmmNUuWC8Yt+J6XjYAH+Uf0k/H6MLA7Z+ZL8AH Q+0N306r/YFVnw2SjhaDODwhRoMvdOKtoIcJZ9L0LQAtizhZMbHCb+CMtcezGZXamXXpk10T zrbI9gnROz1xBnTkzpuOkgo43HRx7GuYy+imM4Lxh/hfgRM6MFjQlcIsUd0UGRCxuq8QmxRq QpRougCwPeXjfOeMRkaQUI7A8kLJ7bTmSzjB9fSBv63b7bajhFHid1COYGe3EZOYRi1RTzbl Tnq2Fdv+BN/ve/9BdZgApfRSX8QkuLsuZF9OWHxIs3wwpvqFoyBXR29CqgrcQFFA/Lm3i/de 3kFuXJUVFTYM4tLwV85J9yGtK6nUsA/v6LXcaTGrQ9P3rJ3iVPYKuyF2w8IMqvFTnHu6+nCv BJxLymOsYJFN4W/5TYdWk1hdIYmmNlM/PH+RWL8z+1WWZgZOBPFJ0FQQbDvTMP6m0/GZT1ZF UVoBG/FAiIQ9UDl8gRsGfe0wS6gzk2evXeAZQyZCii3Dni7Di2KjaPpnl/1F7Zelueb7Vbgd oPRmND9rFixI6bFC4yjlSnL5iwIiULDkLDJN5lcRHI5FO/6bzwVSgHmI+eMlNA/hysdTtp9A jE7VkVxeC9TJ+kEZDv5VUTSxUpNsWj922PkX+78EYPPGTOG4xx7PMqcAEQEAAYkCPAQYAQgA JgIbDBYhBG4R0I91M4HHRPHIPB/WLtluJTqHBQJdenDOBQkWhtczAAoJEB/WLtluJTqHKM0Q ANVcqOv2h5GAqWLN55+Vupdvys3M0WcH1sNiIVbALWPj0AIjjoc5dpq228QAqV9g4wzKFuxi wgLBq3SNMWJ9dtd7rn8ERZ7ssfJE2Px3mTR/FSrkiJxGbG+Yw4I6/anCTW4gx04PUoWkgrve 8HYQgLUQlUF6cXLPZY5bWxp6V+cvl3CEMwByTbJUimld75Ap9UfMQh/K6f0xpEGgEbd6oDeZ IT6fK4m9tohrr9UxdQKCQTNsDPNO2z2xzr7cACObLuu7ATmrnyLva5arY/TH+F/XZzgxshIL EbPWQMEfXFJ3Lga7kmsh2UxucHmb6z/bn8MlRMUcoFp0cqPJUJbanLfZ+yBbTpclavEVT1gi +C2Sqk8guA0/57L0t67Dzm6DEUM2ihqWgNEeGhnTUHofFtWaeg7BG/2iH22iEhuCDQSMR8KK KyazKxZ5d1CHpAgysxBuaOt8+0GkICnLmRiO04GzXoQ58FUnCegTXWtUarfguwQbHV+okyvz ZrAwjq7nS3PsXUxBxUy9agsOeTDITli+IofLXGZXv3cHKmsxxsfPj+xzrUngQcAE/Ez45OOs PW2eJoyQsdVrl1okmjFXAp627u+iqFLVYphSJhh7NRTNA2hXuVA7cIU2qewRk1QzbDK5vZ/T afSl3MlrME/bNt0keNMA/XhNP2z908f1U1DtuQINBEjok5sBEADw+uSZ74E/BGpqWWaY1S5Y Lxi34npeNgAf5R/ST8fowsDtn5kvwAdD7Q3fTqv9gVWfDZKOFoM4PCFGgy904q2ghwln0vQt AC2LOFkxscJv4Iy1x7MZldqZdemTXRPOtsj2CdE7PXEGdOTOm46SCjjcdHHsa5jL6KYzgvGH +F+BEzowWNCVwixR3RQZELG6rxCbFGpClGi6ALA95eN854xGRpBQjsDyQsnttOZLOMH19IG/ rdvttqOEUeJ3UI5gZ7cRk5hGLVFPNuVOerYV2/4E3+97/0F1mACl9FJfxCS4uy5kX05YfEiz fDCm+oWjIFdHb0KqCtxAUUD8ubeL917eQW5clRUVNgzi0vBXzkn3Ia0rqdSwD+/otdxpMatD 0/esneJU9gq7IXbDwgyq8VOce7r6cK8EnEvKY6xgkU3hb/lNh1aTWF0hiaY2Uz88f5FYvzP7 VZZmBk4E8UnQVBBsO9Mw/qbT8ZlPVkVRWgEb8UCIhD1QOXyBGwZ97TBLqDOTZ69d4BlDJkKK LcOeLsOLYqNo+meX/UXtl6W55vtVuB2g9GY0P2sWLEjpsULjKOVKcvmLAiJQsOQsMk3mVxEc jkU7/pvPBVKAeYj54yU0D+HKx1O2n0CMTtWRXF4L1Mn6QRkO/lVRNLFSk2xaP3bY+Rf7vwRg 88ZM4bjHHs8ypwARAQABiQI8BBgBCAAmAhsMFiEEbhHQj3UzgcdE8cg8H9Yu2W4lOocFAl16 cM8FCRaG1zMACgkQH9Yu2W4lOoeg2g//bEUXU3+TEu30Viix530A9zSkA0ScIuoYsywVy9rY 2TU8hrAvjhNjQTDQqxL2Qk4ijzkubKB+gUEu2defsJY8P2g3CtEU5BGeKD6rUdDfwGdm+cra +w13rcQVDZgDLtLXPA4hpLF/7f8zr0MB6I+c+TO3ePSOGYY4FiwhMan/2uqHPG4aknDe4DIe CTyokt4kMY2yYAaWkv9fJfl4FoHi5nlMwoAUPYtDSbg2J4ln83DIRMzLopL0FSct0KQxEwn+ 9ZA1xUBV9ldXvpqa5bMkqih3Nq/sWRAHk/HieVjkCQOL/2RPs0zBggGVaFq7suxxfNHDaS6V KEkhk55mzl88C9MdcxODfLW4emjSKLbLwmMW16TlGEP37WpctaU5+y46TnFUp0J2tlQtJZjO XQYBOYExP3UwykxB8qqHnV6oxGTXDa+vVYJOOH/oEG423O2wx7ZrZkwn3EFgMR5KctagtR9p yY8VZnXP0FWSNqmbluA57drBPFrbKu5VvBfdx2ByJ5CYif88mA7lLcUix7PNqurgpblDsHzJ yH/c7rtlS/Tre/63adLfr8dco2iJo0UH8QIlC1h1439u19eDKtLvJh12ps7FHfUgDnJvxSVG PfSwPH9prRd3coBHIi5w72U5Bzh4C/0M1/qZaffKDMZi+9bssC22gY6adAaqWd1AoLu5Ag0E SOiTmwEQAPD65JnvgT8EampZZpjVLlgvGLfiel42AB/lH9JPx+jCwO2fmS/AB0PtDd9Oq/2B VZ8Nko4Wgzg8IUaDL3TiraCHCWfS9C0ALYs4WTGxwm/gjLXHsxmV2pl16ZNdE862yPYJ0Ts9 cQZ05M6bjpIKONx0cexrmMvopjOC8Yf4X4ETOjBY0JXCLFHdFBkQsbqvEJsUakKUaLoAsD3l 43znjEZGkFCOwPJCye205ks4wfX0gb+t2+22o4RR4ndQjmBntxGTmEYtUU825U56thXb/gTf 73v/QXWYAKX0Ul/EJLi7LmRfTlh8SLN8MKb6haMgV0dvQqoK3EBRQPy5t4v3Xt5BblyVFRU2 DOLS8FfOSfchrSup1LAP7+i13Gkxq0PT96yd4lT2CrshdsPCDKrxU5x7uvpwrwScS8pjrGCR TeFv+U2HVpNYXSGJpjZTPzx/kVi/M/tVlmYGTgTxSdBUEGw70zD+ptPxmU9WRVFaARvxQIiE PVA5fIEbBn3tMEuoM5Nnr13gGUMmQootw54uw4tio2j6Z5f9Re2Xpbnm+1W4HaD0ZjQ/axYs SOmxQuMo5Upy+YsCIlCw5CwyTeZXERyORTv+m88FUoB5iPnjJTQP4crHU7afQIxO1ZFcXgvU yfpBGQ7+VVE0sVKTbFo/dtj5F/u/BGDzxkzhuMcezzKnABEBAAGJAjwEGAEIACYCGwwWIQRu EdCPdTOBx0TxyDwf1i7ZbiU6hwUCXXpwzwUJFobXMwAKCRAf1i7ZbiU6h6DaD/9sRRdTf5MS 7fRWKLHnfQD3NKQDRJwi6hizLBXL2tjZNTyGsC+OE2NBMNCrEvZCTiKPOS5soH6BQS7Z15+w ljw/aDcK0RTkEZ4oPqtR0N/AZ2b5ytr7DXetxBUNmAMu0tc8DiGksX/t/zOvQwHoj5z5M7d4 9I4ZhjgWLCExqf/a6oc8bhqScN7gMh4JPKiS3iQxjbJgBpaS/18l+XgWgeLmeUzCgBQ9i0NJ uDYniWfzcMhEzMuikvQVJy3QpDETCf71kDXFQFX2V1e+mprlsySqKHc2r+xZEAeT8eJ5WOQJ A4v/ZE+zTMGCAZVoWruy7HF80cNpLpUoSSGTnmbOXzwL0x1zE4N8tbh6aNIotsvCYxbXpOUY Q/ftaly1pTn7LjpOcVSnQna2VC0lmM5dBgE5gTE/dTDKTEHyqoedXqjEZNcNr69Vgk44f+gQ bjbc7bDHtmtmTCfcQWAxHkpy1qC1H2nJjxVmdc/QVZI2qZuW4Dnt2sE8Wtsq7lW8F93HYHIn kJiJ/zyYDuUtxSLHs82q6uCluUOwfMnIf9zuu2VL9Ot7/rdp0t+vx1yjaImjRQfxAiULWHXj f27X14Mq0u8mHXamzsUd9SAOcm/FJUY99LA8f2mtF3dygEciLnDvZTkHOHgL/QzX+plp98oM xmL71uywLbaBjpp0BqpZ3UCguw== Subject: Re: [X2Go-Dev] Bug#1429: Tilde expansion no longer performed by libssh after CVE-2019-14889 Message-ID: <5c04ddf5-0cb9-eff2-0346-d37115f7c07e@ionic.de> Date: Fri, 20 Dec 2019 19:06:14 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.3.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="6wZAro9kJQTRxDRbjfNY4BZabW0Y7AO3w" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --6wZAro9kJQTRxDRbjfNY4BZabW0Y7AO3w Content-Type: multipart/mixed; boundary="0agULLclg0aJ7nF61KQjoDvmqoVkqbIcG"; protected-headers="v1" From: Mihai Moldovan To: Sylvain Cuaz , 1429@bugs.x2go.org Message-ID: <5c04ddf5-0cb9-eff2-0346-d37115f7c07e@ionic.de> Subject: Re: [X2Go-Dev] Bug#1429: Tilde expansion no longer performed by libssh after CVE-2019-14889 References: In-Reply-To: --0agULLclg0aJ7nF61KQjoDvmqoVkqbIcG Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable Control: reassign -1 x2goclient 4.1.2.1 Control: forcemerge -1 1428 * On 12/20/19 6:21 PM, Sylvain Cuaz wrote: > SSH key fails to be copied to the remote side because the path use a ti= lde, so neither file sharing nor client-side printing works. > [...] > After using gdb I saw that ONMainWindow::exportDirs() calls SshMasterCo= nnection::copyFile() with dst=3D"~"+uname +"/.x2go/ssh/"+dst; > which is ultimately passed to libssh. But following CVE-2019-14889 the = path is now literal (quoted), see > https://git.libssh.org/projects/libssh.git/log/src/scp.c for the libssh= logs and > https://usn.ubuntu.com/4219-1/ for the ubuntu packages Yes, I think that this change has been intentional. I'll have to fix that= in X2Go Client and I know how to do this easily to retain support for pre-pa= tched and patched versions. I will, however, probably not be able to provide new release versions wit= h that fix (and others) for about a months. I'll let you know when fixed nightly versions are available, though. > As a workaround I reinstalled an old version of the libssh-4 package an= d the bug went away. Please don't do that OR recommend that. You're essentially now running wi= thout the CVE fix, which is probably worse than a broken client. Mihai --0agULLclg0aJ7nF61KQjoDvmqoVkqbIcG-- --6wZAro9kJQTRxDRbjfNY4BZabW0Y7AO3w Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCgAdFiEEbhHQj3UzgcdE8cg8H9Yu2W4lOocFAl39DZYACgkQH9Yu2W4l OoftKw//fGWM1yQUubhYb0+A+m9WuqLzVQqSRb5Bc2/ApIgYYPHSVN0fg8bUSRSe 1rRVvoHm8pJ0zjo/gGfn5yy69N2hsRMk94mKr4tsqdvn0SObbwnBkFsGrbX5ES/9 elgs9QxjN2IKwWX82rEDKdDSGj7CA8FLfwNw51N3aOWGHIpJEKxXUQNy4BZylofA SzTee0xs42zWD0tBRzdcADa6nUHRuZUSB08gB51Y20RFZCHgbSPC0ZiNxmZorxpC N6WCJ78LYLpATqCCmisp2UikR2syRwYBpik2hTLOu6n50Y19nPqIY5Rup/lBcnq9 1CRIv8zWLFQrgL5CwI2yz5rgubb+GmvKrkLxDl40Y8XyjsTCkpHJxdegWI5HY/Q1 QAGc/6GIS91GNaxziCamh35f69nxm3Ch4RDlkt2uR5xl5ENQNuucIbmHfQxOSOlS DaY7E3BfWNQWIaU/JGtAxIH/TmQEcH8mm3pJ1YbBAxdXSF6Xi7lxIyR49CfGQkPk fuOYe+GLt5KPYrRrE38XAQAnAEK5pi3Up1oX3h4IVdr1s/CNO1xiwFW+ibAVaTWq 1+TCGuQPgiCZvt2HGUDYWdmf1QBhtKZerheHkHc6MnrwhHv+oRUTjbiKs9Jm8uC3 oBR81kjcFsFtBaSHp1KpcjtaUe+LC1/Z5e4f6qcExc/ZFUgduMc= =bNmJ -----END PGP SIGNATURE----- --6wZAro9kJQTRxDRbjfNY4BZabW0Y7AO3w--