-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
Dear all,
This is to announce a new release of X2Go Client for Windows.
This is the 3rd release of X2Go Client 4.0.3.2 for Windows. The 2nd release was 4.0.3.2-20150224. The changes are relative to that release.
The changes in this release are: o Windows: Update bundled VcXsrv from 1.15.2.3-xp+vc2013+x2go1 to 1.15.2.4-xp+vc2013+x2go1. The difference is that VcXsrv's bundled version of freetype was updated from 2.5.3 to 2.5.5. This freetype update fixes CVE-2014-9656 through CVE-2014-9675.
As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update.
For the Windows-specific release notes for this release, see this page: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2
Regards, Mike DePaulo -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iF4EAREIAAYFAlTzBroACgkQIFy22CVQsivclQEAmn5i3I4X4m4QCeXweX9FsynO +Q7ts6ZWuNW6vypisR4BAMQBnV982KxY5plVShxODxWUBlyyz/Fqw1SVbsxNlDHW =JM6r -----END PGP SIGNATURE-----
x2go-announcements@lists.x2go.org