Format: 1.8 Date: Wed, 25 Dec 2019 21:11:41 +0100 Source: x2goclient Binary: x2goclient Architecture: armhf Version: 4.1.1.1-2ubuntu0.18.04.1 Distribution: bionic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Mike Gabriel Description: x2goclient - X2Go Client application (Qt5) Launchpad-Bugs-Fixed: 1856795 Changes: x2goclient (4.1.1.1-2ubuntu0.18.04.1) bionic; urgency=medium . * debian/patches: + Add libssh-regression-fix-CVE-2019-14889.patch. In src/sshprocess.cpp: strip ~/, ~user{,/}, ${HOME}{,/} and $HOME{,/} from destination paths in scp mode. Fixes: #1428. This was already necessary for pascp (PuTTY- based Windows solution for Kerberos support), but newer libssh versions with the CVE-2019-14889 also interpret paths as literal strings. (LP: #1856795). Checksums-Sha1: ac1436833b8f5e6b4e0428410e0e3d177dfcbabb 8966772 x2goclient-dbgsym_4.1.1.1-2ubuntu0.18.04.1_armhf.ddeb 2b1199f6d94e9b6ed0ffa377204f1d1f14cdda06 13888 x2goclient_4.1.1.1-2ubuntu0.18.04.1_armhf.buildinfo 6423a74f22757521d683d1cb7cd16cecb0ee494a 1255540 x2goclient_4.1.1.1-2ubuntu0.18.04.1_armhf.deb Checksums-Sha256: a23044b781d9e08f9a7f4a470faf96ecef6d62a679c77155cf314a00bb487d84 8966772 x2goclient-dbgsym_4.1.1.1-2ubuntu0.18.04.1_armhf.ddeb ba844609cf963c932aa137932d5b540fbeba652198ec2966095e35121eae1d58 13888 x2goclient_4.1.1.1-2ubuntu0.18.04.1_armhf.buildinfo 155dd754ced00b5374adc9edc4e76d64a0df5d49044ed0f6eae4b39c0e00562c 1255540 x2goclient_4.1.1.1-2ubuntu0.18.04.1_armhf.deb Files: 7f314d2a191c6fbfdddcdeba616f7fa3 8966772 debug optional x2goclient-dbgsym_4.1.1.1-2ubuntu0.18.04.1_armhf.ddeb 5ead32b2404141c539cf34af71b9e312 13888 x11 optional x2goclient_4.1.1.1-2ubuntu0.18.04.1_armhf.buildinfo f028a6df48225cfcddb6385da381d9db 1255540 x11 optional x2goclient_4.1.1.1-2ubuntu0.18.04.1_armhf.deb Original-Maintainer: Debian Remote Maintainers