X2Go Bug report logs - #509
Document NX/X11 security issue: clipboard sniffing

X-Loop: owner@bugs.x2go.org
Subject: Bug#509: Erhalten Sie eine Spende in Hohe von zwei Millionen funfhunderttausend Euro
Reply-To: info@blavatfamilyfoundation.com, 509@bugs.x2go.org
Resent-From: "Dr Leonard Valentinovic Blavatnik." <sm16195@st-mary.ac.th>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: x2go-dev@lists.x2go.org
X-Loop: owner@bugs.x2go.org
Resent-Date: Sun, 01 Nov 2026 05:35:44 +0000
Resent-Message-ID: <handler.509.B509.17935111493490679@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 509
X-X2Go-PR-Package: wiki.x2go.org
X-X2Go-PR-Keywords: security
References: <1372646308.18508.2.camel@heisenberg.scientia.net>
Received: via spool by 509-submit@bugs.x2go.org id=B509.17935111493490679
          (code B ref 509); Sun, 01 Nov 2026 05:35:44 +0000
Received: (at 509) by bugs.x2go.org; 1 Nov 2026 05:32:29 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on
	ymir.das-netzwerkteam.de
X-Spam-Level: *
X-Spam-Status: No, score=1.3 required=3.0 tests=BAYES_50,DKIM_SIGNED,
	DKIM_VALID,DMARC_MISSING,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,
	LOTS_OF_MONEY,MIME_HTML_ONLY,RCVD_IN_DNSWL_BLOCKED,
	RCVD_IN_ZEN_BLOCKED_OPENDNS,SPF_HELO_NONE autolearn=no
	autolearn_force=no version=4.0.0
Received: from mail-oo2-x04.google.com (mail-oo2-x04.google.com [IPv6:2607:f8b0:4864:31::4])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 017175DB34
	for <509@bugs.x2go.org>; Sun,  1 Nov 2026 06:32:25 +0100 (CET)
Received: by mail-oo2-x04.google.com with SMTP id 006d021491bc7-70073621339so1151727eaf.0
        for <509@bugs.x2go.org>; Sat, 31 Oct 2026 22:32:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=st-mary-ac-th.20260707.gappssmtp.com; s=20260707; t=1793511143; x=1794115943; darn=bugs.x2go.org;
        h=content-transfer-encoding:content-type:mime-version:message-id
         :subject:reply-to:from:to:date:from:to:cc:subject:date:message-id
         :reply-to:content-type;
        bh=ybf4QqVwUXGtmE4mLp0us/+mJHT6kCEg8GJRTWeTcbU=;
        b=SCe2YOrClKW/LWhxPPhDmAGEUEsyE9DoiNY90cobGlJ+LepAOJXHlfrB2+ia42Xx8k
         UZmsGfmSwwTVKit8IUEYbUxyyWO1O+CClhOaUdBFhAHwBkOLcSzUXYTiiScB/bp9ziO4
         oNYzc6MC+CEfIwuG/CCD6vpjSNO0vFCnkFaA5Afesdg9IZ04tj9E5vir67dvjpfPS1Gv
         06l5lpcOrukMNMUQiFGjEJ8rqO4Es+LW/nWW1ozLuBWc+6CN3i0J+fS0MWqnfXsUkEL9
         7sURYCnmLZ9/HhUZ3fYZE/vHKqvtalwHdtfgy/JWpsUzBNqRPYPHZX47wn9jrclNYz4Z
         3AGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20260707; t=1793511143; x=1794115943;
        h=content-transfer-encoding:content-type:mime-version:message-id
         :subject:reply-to:from:to:date:x-gm-gg:x-gm-message-state:from:to:cc
         :subject:date:message-id:reply-to:content-type;
        bh=ybf4QqVwUXGtmE4mLp0us/+mJHT6kCEg8GJRTWeTcbU=;
        b=CEYv1DCSsF0w88PqUNwB3ZqT9WYvyHUSdHY/BUGmxLmN/xjULDa+Z/Pqmx4tWt1bAu
         HKrGIBBwadpvfP9P1wMoHdcj33YxT0wr09eOIwYqjARQMjB/z6qU9gOL67IvGbMY5Qyi
         AnJfgI552BXa+Y2Ycux7lrA6UdUHwuMHPzkqkW7KqiuSRRrDdWT325hmL48YFZolLhmm
         qaS6m+S7yu1obdjlqrNX6IWzQU6otFs4obvHWxCSQ93J+BEW0mZ37KBkQbLOq5Hw+sz5
         1YE+pWRrzHMxnWQKqkHwz//PqIb65F68vyhQg2BwpIQbqgb7PCuAcdOHznTWXuP1fx5Y
         NiwQ==
X-Gm-Message-State: AFq9FYIjvB8niVisRDI1oliJjGUWOffCQJBmv6MGe5MEWr7Ue6kVGOGO
	I6RYh03zDF/CzwoSC2nT33svDz6nZHnVzlQDX68xbp4FaGun7FJuYJbrQYfJ4OBZUyQ1g30MJiD
	pXdueyRE=
X-Gm-Gg: AYBFou2hiqh2HIRKJG9eNBVIwVivmaaFGa5U+T8uCcdO9GtNVvCgjaL7f/jxNswUOvA
	OucQboX1FxxrIwApHwBfLpUCX7JbQvHUpjXJsbNltBl/MozbJNickt4bL8bGU0hekOdDezO/P+i
	vFHC956h2NBCLEDW5M9NZC9UeQS48kPhc9xOJGJrxh47Jk6t4jTddV1zkSDFb3hnP0O5+lQs41X
	WcRxAE0yX75M26BtayHBMFXxGRaJdaxIAfNgjFRcurXfT2OLkeh64BI6eY9jEeSZ5wC29z3wQTg
	DmJuWbyv4uRtdqUb6oKT4z4kyefcFJ/TkgWrH0O5PEW4hUUyEFrXp1EUt6zoGK8FjLZqW2TMGLi
	CscmuClCcI86mp9WlYDeQ+Al1UU16APiTwTdBJup+hZVSX0vO7fNVu7c6rIz14hs3T5gcYNCClD
	VYpwnlMZL1JDMqWcnsZ1BsnBm5vjWX4klMed9r9nPdGER3WHHm5bybwXk/eeu0bL7jbsntoDVPb
	w5hzs5ezXFALJxohII8fqmrpRgtIKByseH8ZX91kBPy9EbuzVZGJ0ZVx2UMwWkSjk44QedYGytd
	vqR0ewFvDI0wGwStnCSYDaQ=
X-Received: by 2002:a05:6820:3406:10b0:70e:d5d:8712 with SMTP id 006d021491bc7-714f2a90ee0mr2507272eaf.70.1793511142809;
        Sat, 31 Oct 2026 22:32:22 -0700 (PDT)
Received: from TINY-C785E3C1 ([2606:cc0:11:23df::1])
        by smtp.gmail.com with ESMTPSA id 006d021491bc7-714f2d16197sm5748854eaf.6.2026.10.31.22.32.21
        for <509@bugs.x2go.org>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Sat, 31 Oct 2026 22:32:22 -0700 (PDT)
Date: Sun, 1 Nov 2026 05:32:21 +0000
To: 509@bugs.x2go.org
From: "Dr Leonard Valentinovic Blavatnik." <sm16195@st-mary.ac.th>
Message-ID: <ceVV4VLOZn7RwI8z68d2XfcU8u9T6lLSX34jTdW8c@TINY-C785E3C1>
X-Mailer: PHPMailer 6.8.0 (https://github.com/PHPMailer/PHPMailer)
MIME-Version: 1.0
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
X-Spam: Yes