X2Go Client for Windows (4.0.3.2-20150508) released

Mike DePaulo mikedep333 at gmail.com
Sat May 9 04:33:29 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear all,

This is to announce a new release of X2Go Client for Windows.

This is the 5th release of X2Go Client 4.0.3.2 for Windows. The 4th
release was 4.0.3.2-20150329. The changes are relative to that release.

The changes in this release are:
  o Windows: Update bundled VcXsrv from 1.15.2.5 (X2Go/Arctica
    Build) to 1.15.2.6 (X2Go/Arctica Build)
    The differences relevant to X2Go are:
      + CVE-2015-3418 was fixed in VcXsrv itself
      + Font files no longer differ in each build due to timestamp
        differences
  o Windows: Update libssh from 0.6.4 to 0.6.5 (while maintaining
    Pageant support). This fixes CVE-2015-3146.

As with most vulnerabilities in 3rd party software, the X2Go project
has not done an analysis of whether X2Go Client was actually affected
by these vulnerabilities. However, as a precaution, we strongly
encourage all users to update.

For the Windows-specific release notes for this release, see this page:
http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2

Regards,
Mike DePaulo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iF4EAREIAAYFAlVNcfkACgkQIFy22CVQsiuNZAD6AiJC+Jfr7aBbUaden5HTvx1N
mj1U/O1mxmddqm75pm4BAOAEzk2cL8LWM/4evO46tTq20mt3p9qHP8TCMjUpIrdT
=BDEA
-----END PGP SIGNATURE-----


More information about the x2go-announcements mailing list