This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch 4.0.3.1-mswin in repository x2goclient. from fbf3d27 Fix copy-deps-win32.bat for now by hardcoding WinBuilder VM paths new acfcba4 Update changelog about copy-deps-win32.bat and latest win32 dependency updates. new 2632479 Correct the changelog about VcXsrv new 762c393 Win32OpenSSL 1.0.1 actually requires the very original version of the VC 2008 DLLs, I determined this emperically and the website states this. It also requires the manifest. new c09ef97 Windows: Update libssh from 0.6.3 to 0.6.4 new 86e83d3 Add note in changelog about libssh 0.6.4 ECDSA key features new a857cf8 Update changelog about Win32 OpenSSL update from 1.0.1j to 1.0.1L The 6 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: copy-deps-win32.bat | 4 ++-- debian/changelog | 24 ++++++++++++++++++++++++ 2 files changed, 26 insertions(+), 2 deletions(-) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 4.0.3.1-mswin in repository x2goclient. commit acfcba462cad6ae37f497eb8654922d0810c0793 Author: Mike DePaulo <mikedep333@gmail.com> Date: Mon Jan 19 07:40:12 2015 -0500 Update changelog about copy-deps-win32.bat and latest win32 dependency updates. --- debian/changelog | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/debian/changelog b/debian/changelog index 0d79e8a..beb36d8 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,20 @@ +x2goclient (4.0.3.1-20150119) UNRELEASED; urgency=medium + + [ Mike DePaulo ] + * New upstream release (4.0.3.1-20150119): + - Windows: Cygwin OpenSSL updated from 1.0.1j-1 to 1.0.1k-1, which + fixes the CVEs announced on 2015-01-08. + - Windows: Bundle new version of VcXsrv: 1.15.2.2-xp+vc2013+x2go1. + The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled + OpenSSL has been updated to 1.0.1j, and that xorg-server + CVE-2014-8091..8103 have been fixed. + - Windows: Make builds easier, and updating bundled dependencies + easier, by adding copy-deps-win32.bat. It copies the exact + version of each dependency (DLL, executable, data, folder, etc) + from x2goclient-contrib.git. + + -- Mike DePaulo <mikedep333@gmail.com> Mon, 19 Jan 2015 07:26:54 -0500 + x2goclient (4.0.3.1-0x2go1) unstable; urgency=medium [ Mike Gabriel ] -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 4.0.3.1-mswin in repository x2goclient. commit 2632479da739a2d87c4fb2d8d45bca69e7568fea Author: Mike DePaulo <mikedep333@gmail.com> Date: Sun Jan 11 11:45:43 2015 -0500 Correct the changelog about VcXsrv --- debian/changelog | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index beb36d8..dd875ac 100644 --- a/debian/changelog +++ b/debian/changelog @@ -6,7 +6,7 @@ x2goclient (4.0.3.1-20150119) UNRELEASED; urgency=medium fixes the CVEs announced on 2015-01-08. - Windows: Bundle new version of VcXsrv: 1.15.2.2-xp+vc2013+x2go1. The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled - OpenSSL has been updated to 1.0.1j, and that xorg-server + OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed. - Windows: Make builds easier, and updating bundled dependencies easier, by adding copy-deps-win32.bat. It copies the exact -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 4.0.3.1-mswin in repository x2goclient. commit 762c3934d7ae2785d16a06cf9985a41023d1553b Author: Mike DePaulo <mikedep333@gmail.com> Date: Mon Jan 12 23:41:15 2015 -0500 Win32OpenSSL 1.0.1 actually requires the very original version of the VC 2008 DLLs, I determined this emperically and the website states this. It also requires the manifest. --- copy-deps-win32.bat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index 0100559..de30cbb 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -4,7 +4,7 @@ xcopy /E /Y D:\x2goclient-contrib\libzip\0.9.3_bin\bin\libzip.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libgcc_s_dw2-1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libstdc++-6.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libwinpthread-1.dll %1\ -xcopy /E /Y D:\x2goclient-contrib\MSVC-DLLs\2008-SP1-9.0.30729.8387-x86 %1\ +xcopy /E /Y D:\x2goclient-contrib\MSVC-DLLs\2008-9.0.21022.8-x86 %1\ xcopy /E /Y D:\x2goclient-contrib\pulse\5.0-rev18_bin %1\ xcopy /E /Y D:\x2goclient-contrib\PuTTY\0.63_bin %1\ xcopy /E /Y /I D:\x2goclient-contrib\VcXsrv\1.15.2.2-xp+vc2013+x2go1_bin %1\VcXsrv -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 4.0.3.1-mswin in repository x2goclient. commit c09ef972515d36b372b9ad219e8054f7160c97ec Author: Mike DePaulo <mikedep333@gmail.com> Date: Tue Jan 13 00:33:11 2015 -0500 Windows: Update libssh from 0.6.3 to 0.6.4 Conflicts: debian/changelog --- copy-deps-win32.bat | 2 +- debian/changelog | 4 ++++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/copy-deps-win32.bat b/copy-deps-win32.bat index de30cbb..5929579 100755 --- a/copy-deps-win32.bat +++ b/copy-deps-win32.bat @@ -1,5 +1,5 @@ xcopy /E /Y D:\x2goclient-contrib\cygwin\20141018-2_bin %1\ -xcopy /E /Y D:\x2goclient-contrib\libssh\0.6.3-762055b-pageant-support-mingw482_bin\bin\libssh.dll %1\ +xcopy /E /Y D:\x2goclient-contrib\libssh\0.6.4-x2go1-mingw482_bin\bin\libssh.dll %1\ xcopy /E /Y D:\x2goclient-contrib\libzip\0.9.3_bin\bin\libzip.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libgcc_s_dw2-1.dll %1\ xcopy /E /Y D:\x2goclient-contrib\MinGW-DLLs\i686-4.8.2-release-posix-dwarf-rt_v3-rev3\libstdc++-6.dll %1\ diff --git a/debian/changelog b/debian/changelog index dd875ac..b696ba5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -8,6 +8,10 @@ x2goclient (4.0.3.1-20150119) UNRELEASED; urgency=medium The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed. + - Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining + Pageant support). This fixes CVE-2014-8132, which shouldn't + affect x2goclient because x2goclient uses the SSH client + functionality, not the SSH server functionality. - Windows: Make builds easier, and updating bundled dependencies easier, by adding copy-deps-win32.bat. It copies the exact version of each dependency (DLL, executable, data, folder, etc) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 4.0.3.1-mswin in repository x2goclient. commit 86e83d3836c8339300b67b2fc31e676f5eb4fd83 Author: Mike DePaulo <mikedep333@gmail.com> Date: Tue Jan 13 00:36:11 2015 -0500 Add note in changelog about libssh 0.6.4 ECDSA key features Conflicts: debian/changelog --- debian/changelog | 1 + 1 file changed, 1 insertion(+) diff --git a/debian/changelog b/debian/changelog index b696ba5..7ffd14e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -12,6 +12,7 @@ x2goclient (4.0.3.1-20150119) UNRELEASED; urgency=medium Pageant support). This fixes CVE-2014-8132, which shouldn't affect x2goclient because x2goclient uses the SSH client functionality, not the SSH server functionality. + 0.6.4 also added 4 features related to ECDSA keys. - Windows: Make builds easier, and updating bundled dependencies easier, by adding copy-deps-win32.bat. It copies the exact version of each dependency (DLL, executable, data, folder, etc) -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch 4.0.3.1-mswin in repository x2goclient. commit a857cf83dd0e2930eb70a14bd61c733127d05ff4 Author: Mike DePaulo <mikedep333@gmail.com> Date: Sun Jan 18 12:20:57 2015 -0500 Update changelog about Win32 OpenSSL update from 1.0.1j to 1.0.1L Conflicts: debian/changelog --- debian/changelog | 2 ++ 1 file changed, 2 insertions(+) diff --git a/debian/changelog b/debian/changelog index 7ffd14e..876319a 100644 --- a/debian/changelog +++ b/debian/changelog @@ -2,6 +2,8 @@ x2goclient (4.0.3.1-20150119) UNRELEASED; urgency=medium [ Mike DePaulo ] * New upstream release (4.0.3.1-20150119): + - Windows: Win32 OpenSSL updates from 1.0.1j to 1.0.1L, which + fixes the CVEs announced on 2015-01-08. - Windows: Cygwin OpenSSL updated from 1.0.1j-1 to 1.0.1k-1, which fixes the CVEs announced on 2015-01-08. - Windows: Bundle new version of VcXsrv: 1.15.2.2-xp+vc2013+x2go1. -- Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git
-
git-admin＠x2go.org