From mikedep333@gmail.com  Fri Oct 10 14:56:38 2014
Received: (at submit) by bugs.x2go.org; 10 Oct 2014 12:56:39 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM,
	T_DKIM_INVALID,URIBL_BLOCKED autolearn=ham version=3.3.2
Received: from mail-wi0-f171.google.com (mail-wi0-f171.google.com [209.85.212.171])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id EB5395E09D
	for <submit@bugs.x2go.org>; Fri, 10 Oct 2014 14:56:37 +0200 (CEST)
Received: by mail-wi0-f171.google.com with SMTP id em10so1943173wid.10
        for <submit@bugs.x2go.org>; Fri, 10 Oct 2014 05:56:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:date:message-id:subject:from:to:content-type;
        bh=RzjtXE6EpiU59+0SL7APJ20RsNPEA0RX1yMgQo6rMuI=;
        b=W0LpzGe95t2+OuK0ZQ6rACCwbKfqQQeroBWRqnxlLd/tE/63cQSpgA44uJDJgSZ4Yr
         YDxL+LfHfvcJKD+36n1OMdMcNBcGZ/Mvqm9/UFBtDnOIiE5bU+BBM4Dg9E3lrNyEf/9m
         3BjZExnn6BpVl/+B3N83WGiU6BIggG0T4fE+6agHku8xU3LPSYTaNYt2ZBHhP0lNaxuq
         Gim+s7yKPpteih2DLH/fpcfO1a8E2P/I0t4TkG00LiP/ArKoFxDcthrAmqTIdnTmj4OI
         ZE5lpV7RtbqI80lVsYhppb8ufqqeIZFi+zvU0sKWScZwx8JbiV6wZQwWedzohwvSMwq+
         02fg==
MIME-Version: 1.0
X-Received: by 10.194.59.109 with SMTP id y13mr2569919wjq.124.1412945797641;
 Fri, 10 Oct 2014 05:56:37 -0700 (PDT)
Received: by 10.180.81.99 with HTTP; Fri, 10 Oct 2014 05:56:37 -0700 (PDT)
Date: Fri, 10 Oct 2014 08:56:37 -0400
Message-ID: <CAMKht8hjXXBp-rqwaJKYvq7C1L5-8U-wtXxZjXThWS_j+eaJ0Q@mail.gmail.com>
Subject: Switch Windows builds from Cygwin Bash to Cygwin Dash
From: Michael DePaulo <mikedep333@gmail.com>
To: submit@bugs.x2go.org
Content-Type: text/plain; charset=UTF-8

Package: x2goclient
Version: 4.0.3.0-2014.10.10-b0c3672

Since before I started maintaining the Windows Builds of X2Go Client,
we've been shipping Cygwin Bash.

Due to the recent Bash vulns and the required Cygwin Bash security
updates, I am thinking of switching us over to Cygwin Dash.[1] I would
simply rename ash.exe to sh.exe as part of the Windows build
process.[2]

A shell is required by Cygwin OpenSSH, which we also ship. woglinde
and I were discussing this on IRC.

<woglinde> mikedep333 dash should be okay
<woglinde> we only need a shell
<woglinde> there are no special shell scripts in the client
<woglinde> and unfornatly the ssh_force commnds needs the shell to
open the command
<woglinde> hm otherwise you always need a shell via ssh

[1] ftp://mirrors.kernel.org/sourceware/cygwin/x86/release/dash/
[2] http://wiki.x2go.org/doku.php/wiki:development:build-howto-mswin:x2goclient