Format: 1.8 Date: Wed, 25 Dec 2019 21:11:41 +0100 Source: x2goclient Binary: x2goclient Architecture: i386 Version: 4.1.1.1-2ubuntu0.18.04.1 Distribution: bionic-proposed Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Mike Gabriel Description: x2goclient - X2Go Client application (Qt5) Launchpad-Bugs-Fixed: 1856795 Changes: x2goclient (4.1.1.1-2ubuntu0.18.04.1) bionic; urgency=medium . * debian/patches: + Add libssh-regression-fix-CVE-2019-14889.patch. In src/sshprocess.cpp: strip ~/, ~user{,/}, ${HOME}{,/} and $HOME{,/} from destination paths in scp mode. Fixes: #1428. This was already necessary for pascp (PuTTY- based Windows solution for Kerberos support), but newer libssh versions with the CVE-2019-14889 also interpret paths as literal strings. (LP: #1856795). Checksums-Sha1: 23851175b4744d9aa5b3d96bf5594306e8834f17 8769536 x2goclient-dbgsym_4.1.1.1-2ubuntu0.18.04.1_i386.ddeb f2faa1ce62fb5752bf4098fe2cd8c586ad8f9f77 13953 x2goclient_4.1.1.1-2ubuntu0.18.04.1_i386.buildinfo 725ee718949be91a96a28a5f23c7e3c1f74d659b 1340260 x2goclient_4.1.1.1-2ubuntu0.18.04.1_i386.deb Checksums-Sha256: c384b91e1625b3eedce096cafcdcbfcad7504466e5100abfc240435702c7bd58 8769536 x2goclient-dbgsym_4.1.1.1-2ubuntu0.18.04.1_i386.ddeb 9bed6fb9dc4ad8f0452cb84c10ab10eb9ddbcf2354e31b80f332e083cc6a8ad1 13953 x2goclient_4.1.1.1-2ubuntu0.18.04.1_i386.buildinfo d77b3cb35b4d129498acde546c677675d668de4560e71e3e9aacf74ccd218d04 1340260 x2goclient_4.1.1.1-2ubuntu0.18.04.1_i386.deb Files: d57f6b38f947ced73b99f11a4d29ee90 8769536 debug optional x2goclient-dbgsym_4.1.1.1-2ubuntu0.18.04.1_i386.ddeb 25def42f676c523a6d79fec935c12523 13953 x11 optional x2goclient_4.1.1.1-2ubuntu0.18.04.1_i386.buildinfo fcde14f67a75d5ac0591cd0c8395186b 1340260 x11 optional x2goclient_4.1.1.1-2ubuntu0.18.04.1_i386.deb Original-Maintainer: Debian Remote Maintainers