tag #333 pending
fixed #333 4.0.1.2
thanks
Hello,
X2Go issue #333 (src:x2goclient) reported by you has been
fixed in X2Go Git. You can see the changelog below, and you can
check the diff of the fix at:
http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=c121b7e
The issue will most likely be fixed in src:x2goclient (4.0.1.2).
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
commit c121b7e2d3d83abdc2d7a29637bc3294e38b2ec3
Author: Mike Gabriel <[email protected]>
Date: Tue Oct 29 13:36:58 2013 +0100
Perform sanity checks on data that comes in from X2Go Servers. Prohibit the
execution of arbitrary code via the ~/.bashrc file. (Fixes: #333).
diff --git a/debian/changelog b/debian/changelog
index e484ba5..e069591 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -8,6 +8,9 @@ x2goclient (4.0.1.2-0~x2go2) UNRELEASED; urgency=low
+ Store broker HTTPS certificate exceptions in
$HOME/.x2go/ssl/exceptions (before: $HOME/ssl/exceptions).
(Fixes: #328).
+ + Perform sanity checks on data that comes in from X2Go Servers.
+ Prohibit the execution of arbitrary code via the ~/.bashrc file.
+ (Fixes: #333).
* Pull-in packaging changes from Debian.
[ Ricardo Díaz Martín ]
_______________________________________________
X2Go-Dev mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/x2go-dev
