From unknown Thu Apr 16 01:23:55 2026 X-Loop: owner@bugs.x2go.org Subject: Bug#335: X2Go issue (in src:python-x2go) has been marked as pending for release Reply-To: Mike Gabriel , 335-quiet@bugs.x2go.org Resent-To: "Dan Halbert" X-Loop: owner@bugs.x2go.org Resent-Date: Tue, 29 Oct 2013 17:48:02 +0000 Resent-Message-ID: Resent-Sender: owner@bugs.x2go.org X-X2Go-PR-Message: report 335 X-X2Go-PR-Package: python-x2go X-X2Go-PR-Keywords: confirmed pending Received: via spool by 335-submitter@bugs.x2go.org id=U335.138306820213661 (code U ref 335); Tue, 29 Oct 2013 17:48:02 +0000 Received: (at 335-submitter) by bugs.x2go.org; 29 Oct 2013 17:36:42 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,NO_RELAYS, URIBL_BLOCKED autolearn=ham version=3.3.2 Received: by ymir (Postfix, from userid 1005) id A1E3E3BC43; Tue, 29 Oct 2013 18:36:41 +0100 (CET) From: Mike Gabriel To: 335-submitter@bugs.x2go.org Cc: control@bugs.x2go.org, 335@bugs.x2go.org Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit X-Mailer: http://snipr.com/post-receive-tag-pending Message-Id: <20131029173641.A1E3E3BC43@ymir> Date: Tue, 29 Oct 2013 18:36:41 +0100 (CET) tag #335 pending fixed #335 0.4.0.9 thanks Hello, X2Go issue #335 (src:python-x2go) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=python-x2go.git;a=commitdiff;h=5b8164d The issue will most likely be fixed in src:python-x2go (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 5b8164de3596bd79e89de18e574252b2730b0916 Author: Mike Gabriel Date: Tue Oct 29 18:36:06 2013 +0100 Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow data injections via ~/.*shrc files. (Fixes: #335). diff --git a/debian/changelog b/debian/changelog index eb4b587..cee5b48 100644 --- a/debian/changelog +++ b/debian/changelog @@ -19,6 +19,8 @@ python-x2go (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Implement two-factor authentication. - Compat fix in _paramiko monkey patch module to also work with early Paramiko versions. + - Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow + data injections via ~/.*shrc files. (Fixes: #335). [ Orion Poplawski ] * debian/control: