X2Go Bug report logs - #879
CVE backports incomplete or wrong

version graph

Package: nx-libs; Maintainer for nx-libs is X2Go Developers <x2go-dev@lists.x2go.org>;

Reported by: Ulrich Sibiller <uli42@gmx.de>

Date: Thu, 21 May 2015 06:45:01 UTC

Severity: normal

Tags: fixed-upstream

Fixed in version 3.5.99.0

Done: Stefan Baur <X2Go-ML-1@baur-itcs.de>

Bug is archived. No further changes may be made.

Forwarded to https://github.com/ArcticaProject/nx-libs/issues/29

Full log

Message #17 received at 879@bugs.x2go.org (full text, mbox, reply):

Received: (at 879) by bugs.x2go.org; 21 May 2015 11:29:28 +0000
From ulrich.sibiller@gmail.com  Thu May 21 13:29:26 2015
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM,
	T_DKIM_INVALID,URIBL_BLOCKED autolearn=ham version=3.3.2
Received: from mail-la0-f53.google.com (mail-la0-f53.google.com [209.85.215.53])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 566445DA84
	for <879@bugs.x2go.org>; Thu, 21 May 2015 13:29:26 +0200 (CEST)
Received: by lagr1 with SMTP id r1so100109734lag.0
        for <879@bugs.x2go.org>; Thu, 21 May 2015 04:29:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type;
        bh=ff/EJqKkVX2u69ZwDtFuXqO2yVeqdPAu7fzuiFBsWOc=;
        b=fMxgZnm6fLSces7Ln/4DgJupRi357RQ0INNn3a2Sa9I4JvX8Dv97pbLtwJSxIbAg5D
         b6hTS3713Z3w4DP5HbJWXnOoWJPEACMbK88u96T3NTlzNfTBnZ8gGSsnDqllGii9HllS
         KdjjY9oZsNb0VzjMoXfztoJ1P9C7oWcfCWqg4Yci04BTN9acUSb31sbsq+tpJPsnceSx
         GUkYOD8LW5ScSoe3nmDlg00guQZu0Oi3EE7FGl4cjFTjAorARgiH2GbMFpYtiewoAS3J
         u69kzQVyATY5TnGieSLOF7rhJh135ELzVPdcaYILBII6SqXpCDm2MAwi57rHdOSsl3gw
         cvnw==
X-Received: by 10.112.16.227 with SMTP id j3mr1786988lbd.43.1432207765817;
 Thu, 21 May 2015 04:29:25 -0700 (PDT)
MIME-Version: 1.0
Sender: ulrich.sibiller@gmail.com
Received: by 10.112.11.201 with HTTP; Thu, 21 May 2015 04:29:05 -0700 (PDT)
In-Reply-To: <20150521080207.GA23374@minobo.das-netzwerkteam.de>
References: <CANVnVYLk9DguVwj55uMF_b=PhhPHu+Uo=UXUEw4qHFeShf5URA@mail.gmail.com>
 <CANVnVYJUyx6xQm30idJa6iV+DAy4NjxxByyv4MimbhYDf5suMA@mail.gmail.com> <20150521080207.GA23374@minobo.das-netzwerkteam.de>
From: Ulrich Sibiller <uli42@gmx.de>
Date: Thu, 21 May 2015 13:29:05 +0200
X-Google-Sender-Auth: cYSb4lKDqy1FkjxnRPt_foJfpGA
Message-ID: <CANVnVYJtV6q=HFuiFaY7y=fcydw7JxeEaaeKXTtsAOPcxoJi6g@mail.gmail.com>
Subject: Re: [X2Go-Dev] Bug#879: CVE backports incomplete or wrong
To: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
Cc: 879@bugs.x2go.org
Content-Type: text/plain; charset=UTF-8

On Thu, May 21, 2015 at 10:02 AM, Mike Gabriel
<mike.gabriel@das-netzwerkteam.de> wrote:
> Control: forwarded -1 https://github.com/ArcticaProject/nx-libs/issues/29

> Thus, we need to double-maintain those code sections (I know, it is a mess and needs to be cleared up finally).
>
>   o step A: build against libX* from X.Org
>   o step B: be aware for code passages being libX* code, but copied to
>     hw/nxagent/ and maintain those passages in hw/nxagent/ for now

I don't think this is limited to the X11 libraries. The mentioned
render.c is for the RENDER extension not the libXrender, I think. It
is built to render.o and included in librender.a. NXrender.c contains
the same functions (+ more) and is compiled to NXrender.o and included
into libnxagent.a. The nxagent binary is finally linked against
libnxagent.a and not librender.a (at least I have not found where that
could happen).

Uli

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 15:09:38 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.