This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 4.0.3.1-mswin in repository x2goclient. commit c09ef972515d36b372b9ad219e8054f7160c97ec Author: Mike DePaulo <mikedep333@gmail.com> Date: Tue Jan 13 00:33:11 2015 -0500 Windows: Update libssh from 0.6.3 to 0.6.4 Conflicts: debian/changelog --- copy-deps-win32.bat | 2 +- debian/changelog | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index de30cbb..5929579 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -1,5 +1,5 @@ xcopy /E /Y D:\x2goclient-contrib\cygwin\20141018-2_bin %1\ -xcopy /E /Y D:\x2goclient-contrib\libssh\0.6.3-762055b-pageant-support-mingw482_bin\bin\libssh.dll %1\ +xcopy /E /Y D:\x2goclient-contrib\libssh\0.6.4-x2go1-mingw482_bin\bin\libssh.dll %1\ xcopy /E /Y D:\x2goclient-contrib\libzip\0.9.3_bin\bin\libzip.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libgcc_s_dw2-1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libstdc++-6.dll %1\ diff --git a/debian/changelog b/debian/changelog index dd875ac..b696ba5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -8,6 +8,10 @@ x2goclient (4.0.3.1-20150119) UNRELEASED; urgency=medium The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed. + - Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining + Pageant support). This fixes CVE-2014-8132, which shouldn't + affect x2goclient because x2goclient uses the SSH client + functionality, not the SSH server functionality. - Windows: Make builds easier, and updating bundled dependencies easier, by adding copy-deps-win32.bat. It copies the exact version of each dependency (DLL, executable, data, folder, etc) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git