[X2Go-Commits] [x2goclient] 04/06: Windows: Update libssh from 0.6.3 to 0.6.4

git-admin at x2go.org git-admin at x2go.org
Mon Jan 19 13:45:14 CET 2015


This is an automated email from the git hooks/post-receive script.

x2go pushed a commit to branch 4.0.3.1-mswin
in repository x2goclient.

commit c09ef972515d36b372b9ad219e8054f7160c97ec
Author: Mike DePaulo <mikedep333 at gmail.com>
Date:   Tue Jan 13 00:33:11 2015 -0500

    Windows: Update libssh from 0.6.3 to 0.6.4
    
    Conflicts:
    	debian/changelog
---
 copy-deps-win32.bat |    2 +-
 debian/changelog    |    4 ++++
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat
index de30cbb..5929579 100755
--- a/copy-deps-win32.bat
+++ b/copy-deps-win32.bat
@@ -1,5 +1,5 @@
 xcopy /E /Y    D:\x2goclient-contrib\cygwin\20141018-2_bin %1\
-xcopy /E /Y    D:\x2goclient-contrib\libssh\0.6.3-762055b-pageant-support-mingw482_bin\bin\libssh.dll %1\
+xcopy /E /Y    D:\x2goclient-contrib\libssh\0.6.4-x2go1-mingw482_bin\bin\libssh.dll %1\
 xcopy /E /Y    D:\x2goclient-contrib\libzip\0.9.3_bin\bin\libzip.dll %1\
 xcopy /E /Y    D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libgcc_s_dw2-1.dll %1\
 xcopy /E /Y    D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libstdc++-6.dll %1\
diff --git a/debian/changelog b/debian/changelog
index dd875ac..b696ba5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -8,6 +8,10 @@ x2goclient (4.0.3.1-20150119) UNRELEASED; urgency=medium
       The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled
       OpenSSL has been updated to 1.0.1k, and that xorg-server
       CVE-2014-8091..8103 have been fixed.
+    - Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining
+      Pageant support). This fixes CVE-2014-8132, which shouldn't
+      affect x2goclient because x2goclient uses the SSH client
+      functionality, not the SSH server functionality.
     - Windows: Make builds easier, and updating bundled dependencies
       easier, by adding copy-deps-win32.bat. It copies the exact
       version of each dependency (DLL, executable, data, folder, etc)

--
Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git


More information about the x2go-commits mailing list