This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goclient. from 8008873 debian/changelog: add closure for #830 new bfd5d50 Update bundled VcXsrv from 1.15.2.4-xp+vc2013+x2go1 to 1.15.2.5 The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: copy-deps-win32.bat | 2 +- debian/changelog | 14 +++++++++----- 2 files changed, 10 insertions(+), 6 deletions(-) -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2goclient. commit bfd5d503cfdf78f400f6509d762652aa24c3d45c Author: Mike DePaulo <mikedep333@gmail.com> Date: Sun Mar 29 11:58:15 2015 -0400 Update bundled VcXsrv from 1.15.2.4-xp+vc2013+x2go1 to 1.15.2.5 --- copy-deps-win32.bat | 2 +- debian/changelog | 14 +++++++++----- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index 9c58739..a291a72 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -8,7 +8,7 @@ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-r xcopy /E /Y D:\x2goclient-contrib\MSVC-DLLs\2008-9.0.21022.8-x86 %1\ xcopy /E /Y D:\x2goclient-contrib\pulse\5.0-rev18_bin %1\ xcopy /E /Y D:\x2goclient-contrib\PuTTY\0.63_bin %1\ -xcopy /E /Y /I D:\x2goclient-contrib\VcXsrv\1.15.2.4-xp+vc2013+x2go1_bin %1\VcXsrv +xcopy /E /Y /I D:\x2goclient-contrib\VcXsrv\1.15.2.5_bin %1\VcXsrv xcopy /E /Y D:\x2goclient-contrib\zlib\1.2.8_bin\zlib1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\zlib\x86-mingw4-1.2.7-1_bin\bin\libz.dll %1\ REM until Win32OpenSSL 1.0.1k comes out diff --git a/debian/changelog b/debian/changelog index 334f8ee..fa52608 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,11 +3,15 @@ x2goclient (4.0.4.0-0x2go1) UNRELEASED; urgency=low [ Mike DePaulo ] * New upstream release (4.0.4.0): - Windows: Update bundled VcXsrv from 1.15.2.2-xp+vc2013+x2go1 to - 1.15.2.4-xp+vc2013+x2go1. - The differences are that CVE-2015-0255 has been fixed in VcXsrv - itself, and that VcXsrv's bundled version of freetype was updated - from 2.5.3 to 2.5.5. - This freetype update fixes CVE-2014-9656 through CVE-2014-9675. + 1.15.2.5 (X2Go/Arctica Build) + The differences relevant to X2Go are: + + CVE-2015-0255 was fixed in VcXsrv itself + + VcXsrv's bundled version of openssl was updated from 1.0.1k + to 1.0.1m (fixes the multiple CVEs announced on 2015-03-19) + + VcXsrv's bundled version of libXfont was updated from 1.4.8 + to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) + + VcXsrv's bundled version of freetype was updated from 2.5.3 + to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675) - Windows: Update bundled nxproxy (nx-libs-lite) from 3.5.0.27 to 3.5.0.28. - Windows: Update bundled Cygwin libjpeg-turbo from 1.3.1-1 to 1.3.1-3. -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
-
git-admin＠x2go.org