-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Dear all,
This is to announce a new Windows-specific release of the X2Go component ,,x2goclient''
The changes in this release of ,,x2goclient'' are:
o Windows: Cygwin Bash (sh.exe) updated from 4.1.10-4 to 4.1.14-7. This fixes the "Shellshock" vulnerability.
For the exact details of the Cygwin Bash update, see the Cygwin project's release announcement for Cygwin Bash 4.1.14-7: https://cygwin.com/ml/cygwin-announce/2014-09/msg00040.html
The X2Go project has not done an analysis of whether X2Go Client was actually affected by the "Shellshock" vulnerability. However, as a precaution, we are releasing this updated build of X2Go Client for Windows with the fixed Cygwin Bash. Unless an analysis is performed, we strongly encourage all users to update. This includes users of the "misc" fonts and "full" fonts builds.
If you are using a X2Go Client for Linux, FreeBSD, or Mac OS X, the OS will provide the updated Bash package.
For the Windows-specific release notes for this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.2.1
Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux)
iF4EAREIAAYFAlQqtM0ACgkQIFy22CVQsiso4wD7BgZ4bLyEIGOUV97xa3BFz4Wc 6yj2wQh/xfImV4U0hHgA/1tfsK11CTjsqH4r0mXoBaxfJsSBb0GgjjG0oeGLK8At =zmxP -----END PGP SIGNATURE-----