Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,x2goclient''.

New gains of this version of ,,x2goclient'' are:

  o more client-broker interaction (new events sent to the broker side)
  o experimental X2Go KDrive support
  o crash fix for the automount feature
  o failing to spawn PulseAudio on Windows does not spawn a warning message any
    longer if sound support has been globally deactivated
  o compatibility with Qt 5.11+
  o cleanly build with newer libssh versions (libssh_threads removal)
  o automatic UNIX helper bypass when starting X2Go Client with command line
    parameters that will let it (almost) immediately exit. No more killing of
    subprocesses when running x2goclient --help, yay!
  o new options --libssh-debug (info/protocol log level) and --libssh-packetlog
    (debug/packet loglevel). BOTH OF THEM MIGHT REVEAL PASSWORDS, SO USE WITH
    EXTREME CARE!
  o new option --bypass-cleanup-helper - can be used to completely bypass the
    UNIX cleanup helper
  o fix sftp-server location scanning for Gentoo 17.1 profiles without a compat
    symlink
  o accept direct IPv6 addresses in proxy fields. Previously such input was
    parsed as "host:port:" and failed miserably.
  o stop reacting twice to tray icon button clicks on macOS. Every tray icon
    click is registered as a left click on that platform and a right click can't
    be distinguished. No other application tries to differentiate (because it
    isn't possible), so X2Go Client was actually buggy in this regard.
  o make internal scp calls compatible with newer libssh versions and those with
    fixes for CVE-2019-14889 backported. This has the drawback that we can't scp
    files into other user's home directories easily any longer, but libssh will
    keep interpreting the path literally so there's nothing sensible we could do
    about this (other than looking up home directories in a complicated manner
    via other tools). Since we don't need to do this (currently), just live with
    that limitation.
  o fix an image corruption bug (seen upon resizing etc.) in custom SVGFrame
    widgets
  o disable PulseAudio autospawning in X2Go config file, thanks to Ville
    Salmela. Less spam in system logs for disconnected sessions!
  o in the Qt5 code path, actually search for "sftp-server", not "sftp-binary".
    Oops.
  o updated translations
  o updated macOS builds to use PulseAudio 13.0
  o updated copyright notices
  o now requires pkgconfig as a build dependency
  o add sftp-server binary path support for the default NixOS location
  o renamed shadow session type label to "X2Go/X11 Desktop Sharing"
  o document --broker-name in man page
  o rename XFreeRDP radio button labels to more accurate pre-2.0 and post-2.0
    versions
  o new Czech translation thanks to Tom Ruzicka
  o correctly close channels on failures during checkLogin () thanks to Ulrich
    Sibiller
  o specifying an exclamation character ("!") at the start of host
    specifications will make X2Go Client skip login/interaction checks
    completely thanks to Ulrich Sibiller. "!" was chosen because it is not a
    valid DNS or alias name part. Can be used for both proxies and host
    endpoints.

Known issues:

  o The X2Go KDrive support will currently work on Debian-based systems that
    include packages for x2gokdriveclient. No RPM-based distributions, no
    Windows support, no macOS support yet.
  o Our upstream builds are STILL fully Qt4-based. There will be no release
    builds for Debian Bullseye due to this.

X2Go Component: x2goclient
Version: 4.1.2.2
Status: RELEASE
Timestamp: 1581543720
Date: Wed, 12 Feb 2020 22:42:00 +0100
Fixes these bug report(s): 1307 1320 1393 1418 1425 1428
Changes:
 x2goclient (4.1.2.2) RELEASED; urgency=medium
 .
   [ Oleksandr Shneyder ]
   * New upstream version (4.1.2.2):
     - Add SSH instruction to list of errors if keyboard-interactive auth has
       failed.
     - Add new brocker feature. Broker can send to client some configuration in
       the section START_CLIENT_CONFIG - END_CLIENT_CONFIG. For the moment is
       supported option events=bool. If true, client sending to broker events:
       CONNECTING, CONNECTED, SUSPENDING, TERMINATING, FINISHED. It's not a real
       session state, but rather the state of X2Go Client.
     - Save session command in resumingSession.command.
     - Send in broker event the duration of session on client.
     - If client is configured to send events, the broker can ask client to send
       ALIVE events. To do this, broker should send config option "liveevent"
       (int).
       It means, if liveevent=10, client will send ALIVE event to broker every
       10 seconds when the client connected to X2Go Session.
     - Broker can send to client command to suspend or terminate the session as
       an answer to the client event message. For this broker should send to
       client SUSPEND ID or TERMINATE ID.
     - Client now sends "login" parameter to the broker when executing task
       "selectsession". Before client just sent a username on the broker and it
       was imposiible to find out user name on X2Go server, which is not always
       the same as broker username. This won't break a compatibility with
       previous broker as they just will ignore this parameter.
     - X2Gokdrive support for X2GoClient.
     - Fix authentification on http broker when sending event.
     - Fix resuming sessions on multiple servers.
     - Initializing sessionId, command and display for direct RDP to complay
       with standard sessions.
     - Direct RDP sesion send to broker event CONNECTED instead of CONNECTING at
       start of RDP client.
     - Fixing setting correct session command when resuming the session.
     - Don't exit if sending event to http broker has failed.
     - If using x2go broker and ssh proxy check for the option
       "usebrokeruserforproxy" in the session file. If it's "true", use the same
       username for the proxy as broker login.
     - Broker can send to client the number of suspended and running sessions
       for each session type.
       Client will display this information to user on session button.
     - update copyright years in about dialog.
     - Do not show password in debug output of HTTP broker.
     - Fix crashing if the path for automount in the session config file in
       wrong format. Supporting both Windows and Linux path in automount format.
       Check if path exists before mounting.
     - Do not show Pulseaudio warning on Windows, if Pulseaudio is disabled in
       settings or by command line.
     - Improve request handling in HTTP broker.
     - Add possibility to suspend and terminate sessions from session selection
       dialog in broker mode.
     - Do not delete session from list if terminating of session is canceled.
 .
   [ Mihai Moldovan ]
   * New upstream version (4.1.2.2):
     - src/printwidget.cpp: add QButtonGroup include, fixes compile errors with
       Qt 5.11+. Fixes: #1307.
     - macbuild.sh: switch to bundling PulseAudio 12.1 since it's now available
       in MacPorts.
     - x2goclient.pro: detect libssh and libssh_threads via pkgconfig on
       UNIX-based platforms. libssh_threads is optional if the libssh version
       is high enough.
     - x2goclient.pro: let static Linux configuration override the new
       pkgconfig-based libssh usage.
     - x2goclient.pro: make system a non-variable call.
     - x2goclient.pro: fix qmake control flow for libssh logic, we really
       wanted to use else if for the Windows section and have the general else
       section being the general fallback.
     - x2goclient.pro: fix quoting issue in system() call. Qmake's quoting
       rules are really weird.
     - macbuild.sh: switch to bundling PulseAudio 12.2 since it's now available
       in MacPorts.
     - res/i18n/x2goclient_cs.ts: whitespace and other fixups.
     - src/x2goclient.cpp: change HTTP to HTTPS links where needed.
     - src/x2goclient.cpp: do not spawn UNIX cleanup helper if arguments that
       let X2Go Client terminate right away have been passed. More work is
       needed here, but that should cover the most basic bits.
     - src/onmainwindow.{cpp,h}: remove left-over references to agentCheckTimer
       and slotCheckAgentProcess ().
     - src/onmainwindow.cpp: fix various broken qCritical () calls.
     - src/{onmainwindow.{cpp,h},{sshmasterconnection,help}.cpp}: let users
       control libssh debugging via the new parameters --libssh-debug and
       --libssh-packetlog. Properly document the new switches and their
       implications.
     - src/sshmasterconnection.cpp: drop DEBUG preprocessor conditional blocks.
       We have never actually disabled it and x2goDebug () will not write out
       anything if debugging has not been requested, so we already have a soft
       condition check for every x2goDebug () call.
     - src/x2goclient.cpp: do not use std::array since that's a C++11 feature,
       just live with plain C arrays for now.
     - x2goclient.pro: fix libssh_threads logic again. Ubuntu Bionic/18.04
       ships a pre-release version of 0.8.0, which is tagged as that version,
       but really based upon 0.7.x and still has/needs a libssh_threads
       library. Big "Wat?" to you, Canonical. Fixes: #1320.
     - src/x2goclient.cpp: fix array length calculation.
     - Windows: Update PuTTY from 0.70 to 0.71. Fixes quite a list of issues
       discovered through the EU-funded bug bounty programme. Not all are
       relevant to X2Go Client.
     - Windows: upgrade bundled VcXsrv to 1.20.1.4.
     - src/sshmasterconnection.cpp: use info (protocol) log level with
       --libssh-debug and debug (packet) log level with --libssh-packetlog.
     - src/sshmasterconnection.cpp: fix compiler warning due to mismatching
       argument with older libssh versions.
     - Makefile: clear out LDFLAGS, add new (cleared) LIBS variable and pass
       down as QMAKE_LIBS. The previous behavior was leading to compile
       failures on arm64 machines (albeit only old distro versions,
       apparently), because QMAKE_LFLAGS is being put on the command line
       *before* the actual object files to be included/linked, which is an
       error for system libraries. Builds will still fail after this commit,
       but that's okay.
     - x2goclient.pro: add libraries that we always want to use on Linux
       correctly to LIBS and use a bigger catch clause. That should work much
       better, since linux-g++ and linux-g++-64 are x86-specific, while there
       are way more potentially useful targets like linux-aarch64-gnu-g++,
       clang, llvm, icc etc.
     - x2goclient.pro: while a linux scope seems to work fine with Qt5, Qt4
       doesn't recognize that, so add another linux-* catch.
     - Windows: add support for x3270-fonts, including adding a pretty nasty
       but necessary fonts.* file regeneration hook.
     - {x2goclient,help,onmainwindow}.cpp: implement new
       --bypass-cleanup-helper parameter.
     - src/onmainwindow.cpp: fix building with Qt 4.6, currently the latest
       version available in EPEL 6.
     - src/onmainwindow.cpp: unbreak builds by fixing syntax error.
     - src/onmainwindow.cpp: also unbreak old EPEL 6 builds.
     - src/onmainwindow.cpp: add (and prefer) non-compat-symlink scp server
       location for 64-bit-based Gentoo distros (17.1+ profiles). Fixes:
       #1393.
     - res/i18n/x2goclient_*.ts: replace changed source strings, no
       retranslations required.
     - src/httpbrokerclient.cpp: do not leak password length in debug output
       either.
     - src/sessionwidget.cpp: stop parsing proxy address as "host:port: if the
       address contains a colon. Fixes: #1418. We don't do this for the
       "normal" host address and this behavior clashes with IPv6 addresses. We
       COULD, theoretically, keep it, but that would require writing an
       arbitrary address parser. Too much effort for little gain.
     - src/onmainwindow.cpp: also remove proxy "host:port" parsing at connect
       time. Fixes: #1418.
     - macbuild.sh: switch to bundling PulseAudio 13.0 since it's now available
       in MacPorts.
     - src/onmainwindow.cpp: disable "left click" action on OS X/macOS. This
       platform always gets a left click event, even when right clicked. May
       sound weird first, but this behavior is consistent between all
       applications - tray icons can be clicked via either button and will
       always trigger a context menu. Let X2Go Client behave the same way.
     - src/sshprocess.cpp: strip ~/, ~user{,/}, ${HOME}{,/} and $HOME{,/} from
       destination paths in scp mode. Fixes: #1428. This was already necessary
       for pascp (PuTTY-based Windows solution for Kerberos support), but newer
       libssh versions with the CVE-2019-14889 also interpret paths as literal
       strings.
     - src/SVGFrame.cpp: simplify implementation a lot. Only paint data onto
       the widget in the paintEvent () function. Drop setting a palette based
       upon the rendered SVG image, which has been very wrong to do from the
       beginning and only lead to visual glitches. Correctly repaint
       single-frame SVG files.
     - src/sshmasterconnection.cpp: work around lupdate warning by adding
       another block in the #else preprocessor branch.
     - res/i18n/x2goclient_*.ts: update translation files.
     - Windows: Update PuTTY from 0.71 to 0.73. Fixes another round of issues
       discovered through the EU-funded bug bounty programme and other security
       problems.
     - src/onmainwindow.cpp: stop PulseAudio from spamming logs after a client
       disconnects. Fixes: #1425. Patch based on one submitted by Ville
       Salmela.
     - src/onmainwindow.cpp: instead of searching for "sftp-binary", try to
       look for "sftp-server" in the Qt 5.x code path. Luckily this only
       affects cases where we bundle sftp-server (which we don't) or where
       sftp-server is actually part of $PATH (which it usually shouldn't be).
     - Windows: upgrade bundled VcXsrv to 1.20.6.0.
     - Windows: upgrade PulseAudio from 7.1 to 13.0.
     - Windows: remove libz. Was previously used by libzip, which has not been
       shipped for quite some time.
     - Windows: Update Win32 OpenSSL from 1.0.2n to 1.0.2u. Implicit.
     - Windows: Upgrade libssh from 0.7.4 to 0.9.3 (while maintaining Pageant
       support). Drop libssh_threads library not provided (or used) any longer.
     - x2goclient.pro: update comment mentioning that libssh does not provide
       pkgconfig files on non-UNIX/Windows platforms any longer and drop
       libssh_thread linkage.
     - res/i18n/x2goclient_nl.ts: add missing singular form to a multi-form
       entry.
     - res/i18n/x2goclient_cs.ts: fix up whitespace and mark actually finished
       translation string as such, also removing my previous comment.
     - res/i18n/x2goclient_nb_no.ts: fix up whitespace and typos.
     - res/i18n/x2goclient_de.ts: better translate UNIX cleanup helper and fix
       "X2Go Client" as "X2GoClient" globally.
     - misc: pre-release copyright update.
     - src/onmainwindow.cpp: update in-code copyright notice.
     - res/i18n/x2goclient_*.ts: update copyright notice in about dialog
       manually.
     - src/onmainwindow.cpp: add comment for translators encouraging them to
       add themselves to copyright notice.
     - res/i18n/x2goclient_*.ts: update after source code changes and comment
       addition.
     - res/i18n/x2goclient_*.ts: mark copyright translation string as
       unfinished for already translated languages (but Finnish) to alert
       translators of the new comment.
     - man/man1/x2goclient.1: pre-release date update.
   * debian/control:
     + Add build-depend on pkg-config.
   * x2goclient.spec:
     + Build-depend on pkg-config.
     + EPEL packages need to depend upon pkgconfig for now, not pkg-config.
     + Pull in redhat-rpm-config manually. This should probably be done by
       something else, like... gcc or qmake or qt(4)-dev, but it isn't.
     + Try to ignore gettext-tools-mini on *SuSE to force installation of the
       new/renamed gettext-runtime-mini package.
     + It's %endif, not %fi.
     + Revert the gettext-tools-mini change, was caused by an outdated
       obs-build version.
 .
   [ Mike Gabriel ]
   * New upstream version (4.1.2.2):
     - Add support for Nix OS for common_sftp_dirs's hard-coded
       sftp-server paths.
     - src/sessionwidget.cpp: Rename shadowing sessiontype to 'X2Go/X11 Desktop
       Sharing'.
     - man/man1/x2goclient.1: Add explanation for the --broker-name option.
     - res/resources.qrc: Add Czech translation file.
     - Update qt_<lang>.qm files from Qt5 v5.11.2.
     - Rename radion button lables for xfreerdp options' style.
   * debian/control:
     + In x2goclient R, prefer freerdp2-x11 over rdesktop over freerdp-x11
       (which is broken these days anyway).
     + In x2goclient D, add x2gokdriveclient.
     + In x2goclient D, add hello as an alternative to x2gokdriveclient. Works
       around non-available x2gokdriveclient on Debian jessie.
 .
   [ Tom Ruzicka ]
   * New upstream release (4.1.2.2):
     - Add new translation: Czech.
     - Second update round of Czech translation + enable it in x2goclient.pro.
 .
   [ Ulrich Sibiller ]
   * New upstream release (4.1.2.2):
     - src/sshmasterconnection.cpp: close channel on failure in checkLogin ().
     - src/sshmasterconnection.{cpp,h}: skip checkLogin() if hostname starts
       with "!". Some special ssh proxies will not allow arbitrary commands.
       checkLogin() will break these sessions because it tries to run the echo
       command on the proxy. By specifying a "!" as the first character of the
       (proxy) hostname you can instruct x2goclient ot skip the checkLogin()
       call altogether. Note that this will break proxies that require you to
       change you password or some other type of interaction. As this is added
       to SshMasterConnection it is also valid to specify that for the server
       hostname although this is not very useful.
 .
   [ Jos Wolfkamp ]
   * New upstream version (4.1.2.2):
     - res/i18n/x2goclient_nl.ts: update Dutch translation file.
 .
   [ Sébastien Ducoulombier ]
   * New upstream version (4.1.2.2):
     - res/i18n/x2goclient_fr.ts: update French translation file.
     - res/i18n/x2goclient_fr.ts: add missing sentence and UTF-8-ize entries.
 .
   [ Ruda Vallo ]
   * New upstream version (4.1.2.2):
     - res/i18n/x2goclient_cs.ts: update Czech translation file.
 .
   [ Klaus Ade Johnstad ]
   * New upstream version (4.1.2.2):
     - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file.
     - res/i18n/x2goclient_nb_no.ts: update Bokmål (Norway) translation file.
 .
   [ Stefan Baur ]
   * New upstream release (4.1.2.2):
     - res/i18n/x2goclient_de.ts: update German translation file.


Regards,



Mihai Moldovan

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
x2go-announcements mailing list
x2go-announcements@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-announcements

Reply via email to