-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Dear all,
This is to announce a new release of X2Go Client for Windows: 4.0.4.0-2015.06.24
This is the 2nd release of X2Go Client 4.0.4.0 for Windows. The 1st release was 4.0.4.0-2015.05.27 . The changes are relative to that releas e.
The changes in this release are: - Windows: Update bundled Win32 OpenSSL from 1.0.1m to 1.0.1o, which fixes the multiple CVEs announced on 2015-06-11. - Windows: Update bundled Cygwin OpenSSL from 1.0.2a-1 to 1.0.2c-1, which fixes the multiple CVEs announced on 2015-06-11. - Windows: Update bundled VcXsrv from 1.17.0.0-1 (X2Go/Arctica Build) to 1.17.0.0-2 (X2Go/Arctica Build) The differences relevant to X2Go are: + VcXsrv's bundled version of openssl was updated from 1.0.2a to 1.0.2c (fixes the multiple CVEs announced on 2015-06-11) Also, - There is now a build with a test fix for X2Go Bug #883. (Window Decorations gone when resuming on smaller screen) See the release notes link below for more details.
As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update.
For the Windows-specific release notes for this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.4.0
Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2
iF4EAREIAAYFAlWMwlMACgkQIFy22CVQsitbeAEAvzSnxUzVAY4H4kAO3hS7Szul npPXSiPyfnojG6nx06cA/3doRiBQXYCEBPa930su5W0Jj0vJGFTbIELlZjerQB2t =1NCW -----END PGP SIGNATURE-----