X2Go Bug report logs - #1597
Possible security vulnerability: x2goclient crashes calling ssh-keygen due to unsanitized arguments

X-Loop: owner@bugs.x2go.org
Subject: Bug#1597: Erhalten Sie eine Spende in Hohe von zwei Millionen funfhunderttausend Euro
Reply-To: info@blavatfamilyfoundation.com, 1597@bugs.x2go.org
Resent-From: "Dr Leonard Valentinovic Blavatnik." <shs23-0072844@spist.edu.ph>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Sun, 01 Nov 2026 05:45:03 +0000
Resent-Message-ID: <handler.1597.B1597.17935118973515922@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 1597
X-X2Go-PR-Package: x2goclient
X-X2Go-PR-Keywords: 
References: <CAB0Xt5CFmtzhHxZi4vABn4jg6XCYbL0wxHVU8rofso3SaMaHag@mail.gmail.com>
Received: via spool by 1597-submit@bugs.x2go.org id=B1597.17935118973515922
          (code B ref 1597); Sun, 01 Nov 2026 05:45:03 +0000
Received: (at 1597) by bugs.x2go.org; 1 Nov 2026 05:44:57 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on
	ymir.das-netzwerkteam.de
X-Spam-Level: *
X-Spam-Status: No, score=1.2 required=3.0 tests=BAYES_50,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DMARC_MISSING,HTML_MESSAGE,
	HTML_MIME_NO_HTML_TAG,LOTS_OF_MONEY,MIME_HTML_ONLY,
	RCVD_IN_DNSWL_BLOCKED,RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_NONE,
	URIBL_BLOCKED,URIBL_DBL_BLOCKED_OPENDNS autolearn=no
	autolearn_force=no version=4.0.0
Received: from mail-oo2-x03.google.com (mail-oo2-x03.google.com [IPv6:2607:f8b0:4864:31::3])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 5B5035DA4D
	for <1597@bugs.x2go.org>; Sun,  1 Nov 2026 06:44:52 +0100 (CET)
Received: by mail-oo2-x03.google.com with SMTP id 006d021491bc7-6c127fb366bso60805eaf.1
        for <1597@bugs.x2go.org>; Sat, 31 Oct 2026 22:44:52 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=spist.edu.ph; s=google; t=1793511891; x=1794116691; darn=bugs.x2go.org;
        h=content-transfer-encoding:content-type:mime-version:message-id
         :subject:reply-to:from:to:date:from:to:cc:subject:date:message-id
         :reply-to:content-type;
        bh=ybf4QqVwUXGtmE4mLp0us/+mJHT6kCEg8GJRTWeTcbU=;
        b=FMyftSUwO53J2+7f6J0T/ua5az4yIlvuCoZOhevW2ifMDxA97Ky6qAfOZp00SzoOWj
         G8NF+UtHKYO5XJV/wk4Heppxc1nxrF6Ug+IhrQh3hnpirPUd6QMKrjqTcQq2v4cK2gKB
         cf26u5YassdO0jSFMFOUgx5fMNsdGdzRFxoXQ=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20260707; t=1793511891; x=1794116691;
        h=content-transfer-encoding:content-type:mime-version:message-id
         :subject:reply-to:from:to:date:x-gm-gg:x-gm-message-state:from:to:cc
         :subject:date:message-id:reply-to:content-type;
        bh=ybf4QqVwUXGtmE4mLp0us/+mJHT6kCEg8GJRTWeTcbU=;
        b=qxGAQcg2ksz6dn4Q7r1ALMRPuSpGPkdtSxRu0LCtef6ITdvuSHrxUUusA7jw9jnuJ2
         YEHPLBmZwV2lW4ZhPUyMhonIA3PdhuadXiBsVrIh4TmQJdxEyWW5JAZI6a/d+/YIy+jL
         GH/HPLcrxtVziwm3iHvhBK4kihT8VGA9d9CfNLj/grtg/kaKTzzhyam/GVVt5I+TK/yU
         OS+kvdQS9cdS/81KIJBGs69sXhiK49NFGaFNw6mrNQp0neigQIUkUIwme5UJwfUuTUrS
         E3SQMHP/2WHlC2g5k72GItkYkS+F7mD+239XvdlZksP4OYCdnazYLz1yR2+GevFc5xpb
         kAWQ==
X-Gm-Message-State: AFq9FYIXFkpJLwoMm13xpLqKbykMGeafVPUjmPjkHEQ6hEWoCB+CTCFf
	kOZm4NFeMwHmagLjF3w74SloO0WEsAx1rxSai+CAj/N7h3HABf+GJk4kfRSJaCLPNFfmLjKBGbB
	P3D/Vkc0=
X-Gm-Gg: AYBFou0jsqcJgapudCKQj/nIpzVUggtRXNI8Dpg7gYEYmifZVDFnkZz1z/6TNB2kwmE
	QBpaSzBNcQSBXGpUeYOgKFL5fL2QsW7FXs/9855Qk6y9KTvUgeiEdWNU63XsuMpnAmKPqFPgiKZ
	jz0TftrSEj6chB3quKl+8WvveaOBn3uCY6vidi9Da1e5qO+hHzXx+wGIW21jtsmwW3Km88WgXkp
	ByiPqEnxWP7417oZ1IRLl6sYcu/WHbSEe9+ASoqsn2602AalwQXp+uxRBf8yHVvjFo/cjKfQIs7
	to+jOnQv13JhGMCQWVZXIUxmvgfCbaEfFpGakJe271sxUPKQAZu56zdxSqwKsu8uZRaBbh/Pzqb
	afrNg+9LK7l7gmNh15DfkmnSoZiCRXsq+XG3bH7uXYzyuKHFiRNBWqJHjReTKvqAOjW7/yzKqDv
	J0mN92klID1LAPYMUPQnNvHHLuWOAvf8NWPVbS8GpaRuI0JefXR2Ur532YxG/w+RWb+tMnxoZUV
	AVIC1agKCPxoYJzkzKSj9NwwXpF+ZsdXVOryyi8rVoFNJoGJNGfIHLG6ErUGsIIPA7eIzAjtMLv
	NXQr9vjPNJk+Y1cjbSGaqWxVoDznBw==
X-Received: by 2002:a05:6820:6dc7:b0:70d:73e2:ff02 with SMTP id 006d021491bc7-714f20bf1d5mr5440469eaf.1.1793511890908;
        Sat, 31 Oct 2026 22:44:50 -0700 (PDT)
Received: from TINY-C785E3C1 ([2606:cc0:11:23df::1])
        by smtp.gmail.com with ESMTPSA id 006d021491bc7-714f2e3c910sm5563284eaf.9.2026.10.31.22.44.48
        for <1597@bugs.x2go.org>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sat, 31 Oct 2026 22:44:49 -0700 (PDT)
Date: Sun, 1 Nov 2026 05:44:47 +0000
To: 1597@bugs.x2go.org
From: "Dr Leonard Valentinovic Blavatnik." <shs23-0072844@spist.edu.ph>
Message-ID: <hrf4fGHksOnNvHlh5cQUJtuw0oyPBOCc0NplABSU@TINY-C785E3C1>
X-Mailer: PHPMailer 6.8.0 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Spam: Yes