-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Dear all,
This is to announce a new release of X2Go Client for Windows.
This is the 5th release of X2Go Client 4.0.3.2 for Windows. The 4th release was 4.0.3.2-20150329. The changes are relative to that release.
The changes in this release are: o Windows: Update bundled VcXsrv from 1.15.2.5 (X2Go/Arctica Build) to 1.15.2.6 (X2Go/Arctica Build) The differences relevant to X2Go are: + CVE-2015-3418 was fixed in VcXsrv itself + Font files no longer differ in each build due to timestamp differences o Windows: Update libssh from 0.6.4 to 0.6.5 (while maintaining Pageant support). This fixes CVE-2015-3146.
As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update.
For the Windows-specific release notes for this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2
Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v2
iF4EAREIAAYFAlVNcfkACgkQIFy22CVQsiuNZAD6AiJC+Jfr7aBbUaden5HTvx1N mj1U/O1mxmddqm75pm4BAOAEzk2cL8LWM/4evO46tTq20mt3p9qHP8TCMjUpIrdT =BDEA -----END PGP SIGNATURE-----