Accepted x2goclient 4.0.3.1-4+deb8u1 (source amd64 all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 21 Dec 2019 18:22:22 +0100
Source: x2goclient
Binary: x2goclient x2goplugin x2goplugin-provider x2goclient-dbg x2goplugin-dbg
Architecture: source amd64 all
Version: 4.0.3.1-4+deb8u1
Distribution: jessie-security
Urgency: medium
Maintainer: X2Go Packaging Team <pkg-x2go-devel@lists.alioth.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Description:
x2goclient - X2Go Client application (Qt4)
x2goclient-dbg - X2Go Client application (Qt4), debug symbols (client)
x2goplugin - X2Go Client (Qt4) as browser plugin
x2goplugin-dbg - X2Go Client application (Qt4), debug symbols (plugin)
x2goplugin-provider - Provide X2Go Plugin via Apache webserver
Closes: 947129
Changes:
x2goclient (4.0.3.1-4+deb8u1) jessie-security; urgency=medium
.
* debian/patches:
+ Add libssh-regression-fix-CVE-2019-14889.patch. In src/sshprocess.cpp:
strip ~/, ~user{,/}, ${HOME}{,/} and $HOME{,/} from destination paths
in scp mode. Fixes: #1428. This was already necessary for pascp (PuTTY-
based Windows solution for Kerberos support), but newer libssh versions
with the CVE-2019-14889 also interpret paths as literal strings.
(Closes: #947129).
Checksums-Sha1:
ed521ab5757b24c92b8a3ce5bd16174bc8ca38bf 2417 x2goclient_4.0.3.1-4+deb8u1.dsc
3f9e8932fa211fac725ef0b77d32b1a66f83bc3d 1539521 x2goclient_4.0.3.1.orig.tar.gz
3be6f7308a9e020942adf45607c0758c4fca1c1f 314756 x2goclient_4.0.3.1-4+deb8u1.debian.tar.xz
7f6272cd6aa69483d94a0228752d95503dae30b3 1191206 x2goclient_4.0.3.1-4+deb8u1_amd64.deb
f996e4d15cd2565a141b18634b9f80032679ed8d 1207394 x2goplugin_4.0.3.1-4+deb8u1_amd64.deb
94ed121b95c486b105320bf60f756bb8e439dec4 26554 x2goplugin-provider_4.0.3.1-4+deb8u1_all.deb
0dcf42e12021971fefa08f7222e1d562bbf2e381 2890892 x2goclient-dbg_4.0.3.1-4+deb8u1_amd64.deb
2ccb9c2ccf06609d164c881b171d974968263ef3 3192872 x2goplugin-dbg_4.0.3.1-4+deb8u1_amd64.deb
Checksums-Sha256:
48d71f1bd221a9c0beaaeaf60e1a398e9263ac4427587c5e8e38be18bcc9f7a7 2417 x2goclient_4.0.3.1-4+deb8u1.dsc
8a5a0d8112250ecc598a9811253081d16f87c17d0707e8f09671c7cb31942bad 1539521 x2goclient_4.0.3.1.orig.tar.gz
a7cf87a9d77997f1852a2f115ed0d84a81f2a95e0b451ebf8a23bfefd52c8b4e 314756 x2goclient_4.0.3.1-4+deb8u1.debian.tar.xz
4ee0e3ffbb24e488fdf0663403a0defd62ea660157a28f0328272aaf435db0d8 1191206 x2goclient_4.0.3.1-4+deb8u1_amd64.deb
c4eb42ba99f78a89a437ec0321079e43735b52b59d0c656afef76a3924dd1b62 1207394 x2goplugin_4.0.3.1-4+deb8u1_amd64.deb
883777847ee121092ea903a2d74fdefd91846a4557609217715e96fa855ce7a3 26554 x2goplugin-provider_4.0.3.1-4+deb8u1_all.deb
e0f489a52d6f83320250d64e94344c11035ae20b1c64a6b20d44f4516b4dd21f 2890892 x2goclient-dbg_4.0.3.1-4+deb8u1_amd64.deb
9ae88cd4d1a957ebffa5599935e9657b75296ac2ae2b42e2c284f16d4882ae94 3192872 x2goplugin-dbg_4.0.3.1-4+deb8u1_amd64.deb
Files:
6d659ebab8a0d700edf37b75cfa489ce 2417 x11 extra x2goclient_4.0.3.1-4+deb8u1.dsc
ef9a20ef96f7c31cc20ece9ebbf1e007 1539521 x11 extra x2goclient_4.0.3.1.orig.tar.gz
3958c95a0e0ab651dcd814847b21f3e5 314756 x11 extra x2goclient_4.0.3.1-4+deb8u1.debian.tar.xz
57644268808797e2376e615960660479 1191206 x11 extra x2goclient_4.0.3.1-4+deb8u1_amd64.deb
fc3e3cd03ea4ccddffc95f609ed13990 1207394 x11 extra x2goplugin_4.0.3.1-4+deb8u1_amd64.deb
23540c73adbbfeff3c066aa921be8402 26554 x11 extra x2goplugin-provider_4.0.3.1-4+deb8u1_all.deb
3b987ee4669455bccfb5ad05f53df480 2890892 debug extra x2goclient-dbg_4.0.3.1-4+deb8u1_amd64.deb
bf364cfbf301a653171e85fd1cf8d276 3192872 debug extra x2goplugin-dbg_4.0.3.1-4+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=AzR+
-----END PGP SIGNATURE-----