This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2goclient. from 16b67f8 Upgrade libssh from 0.7.0 to 0.7.4 new 218db76 Whoops, put the libssh changelog note under the wrong version new 69ee3e5 Windows: Update PuTTY from 0.67 to 0.68 The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: copy-deps-win32.bat | 2 +- debian/changelog | 18 ++++++++++++------ 2 files changed, 13 insertions(+), 7 deletions(-) -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2goclient. commit 218db76b0dff9f01a351ecab2f630a49b55c7bd4 Author: Mike DePaulo <mikedep333@gmail.com> Date: Sat Mar 11 13:10:05 2017 -0500 Whoops, put the libssh changelog note under the wrong version --- debian/changelog | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/debian/changelog b/debian/changelog index 41e07ad..519a11d 100644 --- a/debian/changelog +++ b/debian/changelog @@ -168,6 +168,12 @@ x2goclient (4.1.0.1-0x2go1) UNRELEASED; urgency=medium It is still available in "Programs and Features". - Windows: Upgrade Win32 OpenSSL from 1.0.1t to 1.0.2k Fixes numerous CVEs + - Windows: Upgrade libssh from 0.7.0 to 0.7.4 (while maintaining + Pageant support). + The possibly relevant changes are: + + CVE-2016-0739 was fixed + + improved id_ed25519 support + + numerous bug fixes -- X2Go Release Manager <git-admin@x2go.org> Wed, 22 Feb 2017 07:13:10 +0100 @@ -994,12 +1000,6 @@ x2goclient (4.0.5.1-0x2go1) unstable; urgency=low - Windows: Update PuTTY from 0.64 to 0.66, which fixes CVE-2015-5309. - Windows: Remove libzip. libssh no longer uses it. - - Windows: Upgrade libssh from 0.7.0 to 0.7.4 (while maintaining - Pageant support). - The possibly relevant changes are: - + CVE-2016-0739 was fixed - + improved id_ed25519 support - + numerous bug fixes [ Orion Poplawski ] * New upstream release (4.0.5.1): -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch master in repository x2goclient. commit 69ee3e5d8737bfe9d2f6477024d22627e740d500 Author: Mike DePaulo <mikedep333@gmail.com> Date: Sat Mar 11 13:19:33 2017 -0500 Windows: Update PuTTY from 0.67 to 0.68 --- copy-deps-win32.bat | 2 +- debian/changelog | 6 ++++++ 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index 8da42e8..6e468fb 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -10,7 +10,7 @@ xcopy /E /Y %1\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libstdc++ xcopy /E /Y %1\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libwinpthread-1.dll %3\ || exit /b %errorlevel% xcopy /E /Y %1\MSVC-DLLs\2013-12.0.21005.1-x86\msvcr120.dll %3\ || exit /b %errorlevel% xcopy /E /Y %1\pulse\7.1-2.2_bin %3\ || exit /b %errorlevel% -xcopy /E /Y %1\PuTTY\0.67_bin %3\ || exit /b %errorlevel% +xcopy /E /Y %1\PuTTY\0.68_bin %3\ || exit /b %errorlevel% xcopy /E /Y /I %1\VcXsrv\1.17.0.0-3_bin %3\VcXsrv || exit /b %errorlevel% xcopy /E /Y %1\zlib\1.2.8_bin\zlib1.dll %3\ || exit /b %errorlevel% xcopy /E /Y %1\zlib\x86-mingw4-1.2.7-1_bin\bin\libz.dll %3\ || exit /b %errorlevel% diff --git a/debian/changelog b/debian/changelog index 519a11d..eaefa25 100644 --- a/debian/changelog +++ b/debian/changelog @@ -174,6 +174,12 @@ x2goclient (4.1.0.1-0x2go1) UNRELEASED; urgency=medium + CVE-2016-0739 was fixed + improved id_ed25519 support + numerous bug fixes + - Windows: Update PuTTY from 0.67 to 0.68 + The possibly relevant changes are: + + CVE-2016-6167 was fixed (did not affect X2Go Client by + default because the installation dir is not writeable by + users) + + CVE-2017-6542 was fixed -- X2Go Release Manager <git-admin@x2go.org> Wed, 22 Feb 2017 07:13:10 +0100 -- Alioth's /srv/git/code.x2go.org/x2goclient.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git