From unknown Mon Apr 27 19:08:24 2026 MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) X-Loop: owner@bugs.x2go.org From: owner@bugs.x2go.org (X2Go Bug Tracking System) Subject: Bug#778 closed by Stefan Baur (Migrating/Closing) Message-ID: References: X-X2go-PR-Message: they-closed 778 X-X2go-PR-Package: nx-libs Date: Thu, 25 Jan 2024 21:55:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1706219702-21226-0" This is a multi-part message in MIME format... ------------=_1706219702-21226-0 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This is an automatic notification regarding your Bug report which was filed against the nx-libs package: #778: affected by CVE 2015-0235: Stop using gethosbyname() It has been closed by Stefan Baur . Their explanation is attached below along with your original report. If this explanation is unsatisfactory and you have not received a better one in a separate message then please contact Stefan Baur by replying to this email. --=20 778: https://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=3D778 X2Go Bug Tracking System Contact owner@bugs.x2go.org with problems ------------=_1706219702-21226-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 778-quiet) by bugs.x2go.org; 25 Jan 2024 21:51:41 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=3.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H5,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.126.135]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 584A95DAEB for <778-quiet@bugs.x2go.org>; Thu, 25 Jan 2024 22:51:37 +0100 (CET) Received: from [192.168.0.15] ([178.202.75.45]) by mrelayeu.kundenserver.de (mreue010 [213.165.67.97]) with ESMTPSA (Nemesis) id 1M2etD-1rW9El3flX-0049rx for <778-quiet@bugs.x2go.org>; Thu, 25 Jan 2024 22:51:36 +0100 Message-ID: Date: Thu, 25 Jan 2024 22:51:36 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird From: Stefan Baur Content-Language: en-US To: 778-quiet@bugs.x2go.org Subject: Migrating/Closing Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Provags-ID: V03:K1:w9XDIRA9iLTQCHHjx5FCj11WIfOm/vBtXK4uruwj7460jMCuQMe uR8RNc9eOTtiNeMY3XOvYsREaxjbBN92j34t29SZLbvDHRtYd87iPcpn7AsyHjNS3U78Xuc LNso6Br9q4O2wjZ2a5d88a18v52zH/43Y6Sg8E4cIZzK3R4rfvWbOs11tLGS525F+7QLIzk OCrStLtLFTi5q3GZyD38g== UI-OutboundReport: notjunk:1;M01:P0:urX+R3Z+EaM=;KlKPGyTbF48Ki/ODo6GzX+byNw3 QJNtfqC3+iZRgXbkoXUECpEvBcTV/Cw0/5CNz2ggSXaETWYuD/IeKLAL1BwiW8jjbDngJGuwk Jz+JtnnhtIJ1k8jjVzp/Od+h39OIwJ/3NsQgTxY6I9L4yHUhldMtPiD9KfBqgg795LUpypi1L 9f1v9YJD28+KbuaS60q3BMD1/d+I1GyZ1nNrAi+znEBF/QExlshOS5HbGKieBXsFoEe5sXs5a tSoYQ/PhPIoS642hMrsZ7JytE8HeCwaTBdzflIY9cafVzGIA/1BwKv/k2pUyPcKYBEUUEGt91 dP+zCiQaLMpnoMJokuNNQScQScvSJ+xG4NrYoF4gPnZdnnN4DSgFkxf6sJdRVVQgJ0WgrtQP5 kkjeG6SjBk8rP74esGFXzNUuofeoO884MUvSLA9UA3I5ZBG9qDu414hxv9sASEV/US4DcJZhl U5Wl7UbRA7gBeevc33kNSXGXSLCRAvQDq6VwaF8LpvXcnLP6UEwyyQuI9rAGPnzFSmYJSp3Ys hO9ws8YHXQ+vI5zdfv9wL1KEQ90H89oxrry5PuiXvBRLsi7WE1+zP8f4e2qXSP10QVlfJIWYQ y1xda5qJsQdCEsh92ACwFHQD5kYpIVO48RMls1UJxPmk06mGYKdtzMKM72sptio30Vo7EV1gj XZgTDist2Tp1Kl1oiX2f6tUfRhAX653gLB3N8wp4rW+pajXE3vMAaSKGG1G4YDu2CdXi92tKi Nrq8sryiIT0prfdTW7OAKIHhWt2KqvS8ea/28cnEZe6Y27L7busw9c3GVAs1I5Bqulz4Xt4Qe LEBaHkZEIEgSAcvmB6SMRsCWpWsgPeh3vqaGXGMQ8sWUI3Xdw4bMnm8Zxr1R/ZlNPAeuq0H0f Dwv1ao5pvuavtQp9U7bDFWBJAUlk0qKoF/HM= Control: close -1 Control: archive -1 This issue is now being tracked in the Arctica Issue Tracker over on Github: Kind Regards, Stefan Baur -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 ------------=_1706219702-21226-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by bugs.x2go.org; 1 Feb 2015 07:04:47 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_40,URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 159735DB48 for ; Sun, 1 Feb 2015 08:04:45 +0100 (CET) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id C5BD6220 for ; Sun, 1 Feb 2015 08:04:44 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id B97DD3BC1E for ; Sun, 1 Feb 2015 08:04:44 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yWRvxnoWKqVB for ; Sun, 1 Feb 2015 08:04:44 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 96FAF3B9EA for ; Sun, 1 Feb 2015 08:04:44 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 4B08F3BC1E for ; Sun, 1 Feb 2015 08:04:44 +0100 (CET) Received: from [192.168.1.28] (p5B3B8F07.dip0.t-ipconnect.de [91.59.143.7]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTPSA id D5BAE3B9EA for ; Sun, 1 Feb 2015 08:04:43 +0100 (CET) From: Mike Gabriel Reply-To: Mike Gabriel To: submit@bugs.x2go.org Subject: affected by CVE 2015-0235: Stop using gethosbyname() X-Mailer: Modest 3.2 Content-Type: text/plain; charset=utf-8 Content-ID: <1422774280.1428.4.camel@Nokia-N900> Date: Sun, 01 Feb 2015 08:04:41 +0100 Message-Id: <1422774281.1428.5.camel@Nokia-N900> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Package: src:nx-libs Severity: important The NX source code uses gethostbyname() at several locations and is potentially affected by CVE 2015-0235 (GHOST security issue in glibc). We should move towards using getaddrinfo() asap. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976148 GnuPG Key ID 0x25771B13 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de ------------=_1706219702-21226-0--