X2Go Bug report logs - #1004
Windows: Update libssh to 0.7.3 to fix CVE-2016-0739

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: Mike DePaulo <mikedep333@gmail.com>

Date: Fri, 26 Feb 2016 14:00:02 UTC

Severity: normal

Tags: build-win32

Found in version 4.0.5.0

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1004; Package x2goclient. (Fri, 26 Feb 2016 14:00:02 GMT) (full text, mbox, link).

Acknowledgement sent to Mike DePaulo <mikedep333@gmail.com>:
New Bug report received and forwarded. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Fri, 26 Feb 2016 14:00:02 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

package: x2goclient
version: 4.0.5.0
tags: build-win32

You can read about CVE-2016-0739 here:
https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/

This bug is specifically for X2Go Client for Windows because X2Go
Client uses a patched version of libssh. The patch is here:
http://code.x2go.org/gitweb?p=x2goclient-contrib.git;a=blob_plain;f=libssh/0.7.0-x2go1-mingw482_src/0001-Port-KDE-for-WIndows-s-Pageant-patch-0001-implement-.patch;hb=HEAD

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 11:54:10 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

X2Go Bug report logs - #1004 Windows: Update libssh to 0.7.3 to fix CVE-2016-0739

X2Go Bug report logs - #1004
Windows: Update libssh to 0.7.3 to fix CVE-2016-0739