[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Regression in X2Go Client caused by CVE-2019-14889/libssh fix



Hi again,

On  Sa 21 Dez 2019 17:27:15 CET, Mike Gabriel wrote:

Hi all,

the recent libssh fix for CVE-2019-14889 causes a regresion in X2Go Client:

```
Connection failed. Couldn't create remote file ~<user>/.x2go/ssh/key.X18947 - SCP: Warning: status code 1 received: scp: ~<user>/.x2go/ssh: No such file or directory"
```

The solution to this is a fix to be applied against X2Go Client (in jessie/stretch/buster/unstable):
https://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=ce559d1

Thanks,
Mike

See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=947129
and https://bugs.launchpad.net/ubuntu/+source/libssh/+bug/1856795

Btw... if anyone with MOTU (Ubuntu maintainer) status is reading this, please follow-up and provide regression fixes (i.e. a patched X2Go Client, see LP:#1856795) to Ubuntu.

Thanks+Greets,
Mike
--

mike gabriel aka sunweaver (Debian Developer)
mobile: +49 (1520) 1976 148
landline: +49 (4351) 486 14 27

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: sunweaver@debian.org, http://sunweavers.net

Attachment: pgp9OxD07YFkx.pgp
Description: Digitale PGP-Signatur


Reply to: