| Version 14 (modified by , 3 weeks ago) (diff) |
|---|
Distribution Packages
And why you should generally not use them.
A great explanation of the Debian / Ubuntu packaging mess can be found here: Matthew Garrett: There's more than one way to exploit the commons.
The worst is without a doubt the situation with the Ubuntu packages.
Debian's hand waving about backports is rightfully ignored here.
Apart from the obvious danger of running versions without any security updates - which is documented below, there are other problems with downstream packages:
- unusable builds (ie: fedora : invalid mode 'start')
- invalid and unnecessary package dependencies (ie: Fedora)
- enabling untested options or dangerous codecs (all distros)
- gratuitous patching, causing breakage (ie Debian arm builds were unusable for years: FTBFS: xvfb path patch)
etc
The list of currently supported versions can be found here: wiki/Versions.
This table was generated on the 2020-01-17 when 3.0.5 was the latest LTS version available.
| Distribution | Variant | Version Shipped | Known Issues |
|---|---|---|---|
| Fedora | Fedora 30 and 31 | 3.0.3 | OK: 3.0.5 in testing, you may want to add rpmfusion's xpra-codecs-freeworld package to get all the codecs - only one problem: their packaging unmercifully conflict with the packages from xpra.org, also contains invalid and unnecessary dependencies |
| Ubuntu | Xenial aka 16.04 | 0.15.8 | over 4 years without any fixes, known bugs and security vulnerabilities - do not use, very dangerous, missing components, etc |
| Ubuntu | Bionic aka 18.04 | 2.1.3 | 2.5 years without any fixes, numerous serious issues, dangerous |
| Ubuntu | Eoan aka 19.10 | 2.4.3 | buggy, 14 months without any fixes |
| Debian | Buster | 2.4.3 | buggy, 14 months without any fixes |
| Debian | Stretch | 0.17.6 | 3.5 years out of date, known bugs and security vulnerabilities - do not use, very dangerous, missing components, etc |
| Gentoo | Stable | 2.2.2 | Dire: 2 years out of date! |
| Gentoo | Testing | 3.0.2 | Missing some important fixes, dubious patches applied |
| Arch | 3.0.5 | Great: fully up to date | |
To see the fixes that are missing, follow the "Commit log" links for each branch on the "Release Notes" section of the version / fixes page.
This table was generated on the 2017-03-18 when 1.0.4 was the latest LTS version available. (2.0 released the day before)
| Distribution | Variant | Version Shipped | Known Issues |
|---|---|---|---|
| Fedora | Fedora 24 and 25 | 1.0 | missing critical updates, you may want to add rpmfusion's xpra-codecs-freeworld package to get all the codecs |
| Ubuntu | Trusty aka 14.04 | http://packages.ubuntu.com/trusty/xpra (link is now 404) 0.12.3 | not a single fix applied in 3 years, dangerous |
| Ubuntu | Xenial aka 16.04 | 0.15.8 | 16 months without any fixes, based on a dead branch |
| Debian | Jessie | 0.14.10 | Awful: 2.5 years and 27 stable updates missing! Version no longer supported, includes known bugs, crashes and serious security vulnerabilities - dangerous! |
| Debian | Jessie-backports | https://packages.debian.org/jessie-backports/xpra (link is now 404) 0.17.6] | Backports an EOL version!? |
| Debian | Stretch | [https://packages.debian.org/stretch/xpra 0.17.6 | EOL version, known bugs and security vulnerabilities - do not use |
| Gentoo | Stable | 1.0.3 | Not too bad: 1 minor update behind |
| Gentoo | Testing | 1.0.4 | Good: up to date! |
| Arch | https://aur.archlinux.org/packages/xpra-winswitch (link is now 404) 2.0 | Great: most up to date | |
Here's an even older version of this table, last updated 2015-12-28, when 0.15.10 was the latest version available. (0.14.33 for LTS branch).
| Distribution | Variant | Version Shipped | Known Issues |
|---|---|---|---|
| Fedora | Fedora 21 and 22 | 0.15.9 | Up to date (0.15.10 in "testing" queue), but you need rpmfusion's xpra-codecs-freeworld package to get all the codecs |
| Ubuntu | Precise aka 12.04 | http://packages.ubuntu.com/precise/xpra (link is now 404) 0.0.7.36 | Far too many to list - not a single bug fix applied in 4 years! |
| Ubuntu | Trusty aka 13.04 | [http://packages.ubuntu.com/trusty/xpra (link is now 404) 0.12.3 | Far too many to list - not a single bug fix applied in 2 years, avoid |
| Ubuntu | Vivid aka 15.04 | [http://packages.ubuntu.com/vivid/xpra (link is now 404) 0.14.10 | Awful: 23 stable updates missing! version no longer supported, known bugs including crashes and vulnerabilities - avoid! |
| Debian | Squeeze Backports | https://packages.debian.org/squeeze-backports/xpra (link is now 404) 0.3.11 | Fundamentally broken - do not use |
| Debian | Wheezy | https://packages.debian.org/wheezy/xpra} (link is now 404) 0.3.11 | Fundamentally broken - do not use |
| Debian | Wheezy-backports | https://packages.debian.org/wheezy-backports/xpra (link is now 404) 0.14.10 | Awful: 23 stable updates missing! version no longer supported, known bugs including crashes and vulnerabilities - avoid! |
| Debian | Jessie | https://packages.debian.org/jessie/xpra (link is now 404) 0.14.10 | Awful: 23 stable updates missing! version no longer supported, known bugs including crashes and vulnerabilities - avoid! |
| Debian | Jessie-backports | https://packages.debian.org/jessie-backports/xpra (link is now 404) 0.16.3 | Not too bad. |
| Gentoo | Stable | 0.15.6 | Not too bad: 4 minor updates behind |
| Gentoo | Testing | 0.15.9 | Good: only one minor update behind |
| Arch | 0.15.9 | Good: only one minor update behind | |
We used to try to keep track of the missing fixes, but this is far too much work nowadays.
copyleft 2010 - 2020
