This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch release/4.0.3.2-mswin in repository x2goclient. from d5a0734 4.0.3.2-20150229 -> 4.0.3.2-20150301 new 8b65bb0 Update bundled VcXsrv from 1.15.2.4-xp+vc2013+x2go1 to 1.15.2.5 new d0bbac1 Update Cygwin bundle for openssl 1.0.2a-1 update new 57a2905 Update changelog about Win32 OpenSSL update from 1.0.1L to 1.0.1m new d419a2c Windows: Update bundled PuTTY from 0.63 to 0.64. The 4 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: copy-deps-win32.bat | 6 +++--- debian/changelog | 23 +++++++++++++++++++++++ 2 files changed, 26 insertions(+), 3 deletions(-) -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch release/4.0.3.2-mswin in repository x2goclient. commit 8b65bb0cd2065ace2d85a531fbe7505696c846fa Author: Mike DePaulo <mikedep333@gmail.com> Date: Sun Mar 29 11:58:15 2015 -0400 Update bundled VcXsrv from 1.15.2.4-xp+vc2013+x2go1 to 1.15.2.5 Conflicts: debian/changelog --- copy-deps-win32.bat | 2 +- debian/changelog | 17 +++++++++++++++++ 2 files changed, 18 insertions(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index 9c58739..a291a72 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -8,7 +8,7 @@ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-r xcopy /E /Y D:\x2goclient-contrib\MSVC-DLLs\2008-9.0.21022.8-x86 %1\ xcopy /E /Y D:\x2goclient-contrib\pulse\5.0-rev18_bin %1\ xcopy /E /Y D:\x2goclient-contrib\PuTTY\0.63_bin %1\ -xcopy /E /Y /I D:\x2goclient-contrib\VcXsrv\1.15.2.4-xp+vc2013+x2go1_bin %1\VcXsrv +xcopy /E /Y /I D:\x2goclient-contrib\VcXsrv\1.15.2.5_bin %1\VcXsrv xcopy /E /Y D:\x2goclient-contrib\zlib\1.2.8_bin\zlib1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\zlib\x86-mingw4-1.2.7-1_bin\bin\libz.dll %1\ REM until Win32OpenSSL 1.0.1k comes out diff --git a/debian/changelog b/debian/changelog index a590c0c..9ef7533 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,20 @@ +x2goclient (4.0.3.2-20150329) unstable; urgency=medium + + [ Mike DePaulo ] + * New upstream release (4.0.3.2-20150329): + - Windows: Update bundled VcXsrv from 1.15.2.2-xp+vc2013+x2go1 to + 1.15.2.5 (X2Go/Arctica Build) + The differences relevant to X2Go are: + + CVE-2015-0255 was fixed in VcXsrv itself + + VcXsrv's bundled version of openssl was updated from 1.0.1k + to 1.0.1m (fixes the multiple CVEs announced on 2015-03-19) + + VcXsrv's bundled version of libXfont was updated from 1.4.8 + to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) + + VcXsrv's bundled version of freetype was updated from 2.5.3 + to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675) + + -- Mike DePaulo <mikedep333@gmail.com> Sun, 29 Mar 2015 15:11:00 -0500 + x2goclient (4.0.3.2-20150301) unstable; urgency=medium [ Mike DePaulo ] -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch release/4.0.3.2-mswin in repository x2goclient. commit d0bbac1d574388b5b1c2ea6f520c54c19c0f445c Author: Mike DePaulo <mikedep333@gmail.com> Date: Sun Mar 29 13:16:00 2015 -0400 Update Cygwin bundle for openssl 1.0.2a-1 update --- copy-deps-win32.bat | 2 +- debian/changelog | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index a291a72..ddc9d2a 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -1,4 +1,4 @@ -xcopy /E /Y D:\x2goclient-contrib\cygwin\20141018-4_bin %1\ +xcopy /E /Y D:\x2goclient-contrib\cygwin\20141018-5_bin %1\ del %1\nxproxy.exe.unstripped %1\libXcomp.a %1\libXcomp.dll.a xcopy /E /Y D:\x2goclient-contrib\libssh\0.6.4-x2go1-mingw482_bin\bin\libssh.dll %1\ xcopy /E /Y D:\x2goclient-contrib\libzip\0.9.3_bin\bin\libzip.dll %1\ diff --git a/debian/changelog b/debian/changelog index 9ef7533..8b2d589 100644 --- a/debian/changelog +++ b/debian/changelog @@ -12,6 +12,8 @@ x2goclient (4.0.3.2-20150329) unstable; urgency=medium to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) + VcXsrv's bundled version of freetype was updated from 2.5.3 to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675) + - Windows: Update bundled Cygwin openssl from 1.0.1k-1 to 1.0.2a-1. + This update fixes the multiple CVEs announced on 2015-03-19 -- Mike DePaulo <mikedep333@gmail.com> Sun, 29 Mar 2015 15:11:00 -0500 -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch release/4.0.3.2-mswin in repository x2goclient. commit 57a29055cad4a890598f3dba87bfbff2210af78a Author: Mike DePaulo <mikedep333@gmail.com> Date: Sun Mar 29 13:21:56 2015 -0400 Update changelog about Win32 OpenSSL update from 1.0.1L to 1.0.1m Conflicts: debian/changelog --- debian/changelog | 2 ++ 1 file changed, 2 insertions(+) diff --git a/debian/changelog b/debian/changelog index 8b2d589..9d75538 100644 --- a/debian/changelog +++ b/debian/changelog @@ -12,6 +12,8 @@ x2goclient (4.0.3.2-20150329) unstable; urgency=medium to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) + VcXsrv's bundled version of freetype was updated from 2.5.3 to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675) + - Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m, + which fixes the multiple CVEs announced on 2015-03-19. - Windows: Update bundled Cygwin openssl from 1.0.1k-1 to 1.0.2a-1. This update fixes the multiple CVEs announced on 2015-03-19 -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch release/4.0.3.2-mswin in repository x2goclient. commit d419a2c73f0dbe9f6723c9c16c5188f2e08b1ceb Author: Mike DePaulo <mikedep333@gmail.com> Date: Sun Mar 29 15:48:54 2015 -0400 Windows: Update bundled PuTTY from 0.63 to 0.64. Conflicts: debian/changelog --- copy-deps-win32.bat | 2 +- debian/changelog | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index ddc9d2a..bf3405b 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -7,7 +7,7 @@ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-r xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libwinpthread-1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MSVC-DLLs\2008-9.0.21022.8-x86 %1\ xcopy /E /Y D:\x2goclient-contrib\pulse\5.0-rev18_bin %1\ -xcopy /E /Y D:\x2goclient-contrib\PuTTY\0.63_bin %1\ +xcopy /E /Y D:\x2goclient-contrib\PuTTY\0.64_bin %1\ xcopy /E /Y /I D:\x2goclient-contrib\VcXsrv\1.15.2.5_bin %1\VcXsrv xcopy /E /Y D:\x2goclient-contrib\zlib\1.2.8_bin\zlib1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\zlib\x86-mingw4-1.2.7-1_bin\bin\libz.dll %1\ diff --git a/debian/changelog b/debian/changelog index 9d75538..af674df 100644 --- a/debian/changelog +++ b/debian/changelog @@ -14,6 +14,8 @@ x2goclient (4.0.3.2-20150329) unstable; urgency=medium to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675) - Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m, which fixes the multiple CVEs announced on 2015-03-19. + - Windows: Update bundled PuTTY from 0.63 to 0.64. + In addition to other changes, CVE-2015-2157 has been fixed. - Windows: Update bundled Cygwin openssl from 1.0.1k-1 to 1.0.2a-1. This update fixes the multiple CVEs announced on 2015-03-19 -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
-
git-admin＠x2go.org