This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2goclient. commit f1de7c89d28f31ac834cf835ab5d15c06e46f57b Author: Mike DePaulo <mikedep333@gmail.com> Date: Tue Jan 13 00:33:11 2015 -0500 Windows: Update libssh from 0.6.3 to 0.6.4 --- copy-deps-win32.bat | 2 +- debian/changelog | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index de30cbb..5929579 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -1,5 +1,5 @@ xcopy /E /Y D:\x2goclient-contrib\cygwin\20141018-2_bin %1\ -xcopy /E /Y D:\x2goclient-contrib\libssh\0.6.3-762055b-pageant-support-mingw482_bin\bin\libssh.dll %1\ +xcopy /E /Y D:\x2goclient-contrib\libssh\0.6.4-x2go1-mingw482_bin\bin\libssh.dll %1\ xcopy /E /Y D:\x2goclient-contrib\libzip\0.9.3_bin\bin\libzip.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libgcc_s_dw2-1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libstdc++-6.dll %1\ diff --git a/debian/changelog b/debian/changelog index 6dd2f4a..1d89ea6 100644 --- a/debian/changelog +++ b/debian/changelog @@ -49,6 +49,10 @@ x2goclient (4.0.3.2-0x2go1) UNRELEASED; urgency=medium The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed. + - Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining + Pageant support). This fixes CVE-2014-8132, which shouldn't + affect x2goclient because x2goclient uses the SSH client + functionality, not the SSH server functionality. - Windows: Fix compatibility with PulseAudio 6.0 - Windows: Enable X2Go Client for Windows to build under VS2010 nmake (but not the VS2010 IDE due to a Qt4 Visual Studio Add-in limitation) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git