[X2Go-Commits] page changed: doc:release-notes-mswin:x2goclient-4.0.2.0

wiki-admin at x2go.org wiki-admin at x2go.org
Thu Apr 24 01:20:56 CEST 2014


A page in your DokuWiki was added or changed. Here are the details:

Date        : 2014/04/23 23:20
Browser     : Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36
IP-Address  : 72.94.83.13
Hostname    : pool-72-94-83-13.phlapa.fios.verizon.net
Old Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.2.0?rev=1397187680
New Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.2.0
Edit Summary: Multiple updates
User        : mikedep333

@@ -15,13 +15,13 @@
      *http://code.x2go.org/releases/binary-win32/3rd-party/vcxsrv-modified-by-x2go-project/
  We are currently attempting to upstream these changes on a separate branch of VcXsrv.
      *https://sourceforge.net/p/vcxsrv/feature-requests/10/
  
- Also, note that **the X2Go Project strongly encourages all its users to migrate away from Windows XP** now that Microsoft will no longer provide any more security patches for it.
We are providing continued compatibility with Windows XP because X2Go Client can be part of an
+ Also, note that **the X2Go Project strongly urges all its users to migrate away from Windows XP** now that Microsoft will no longer provide any more security patches for it. We are providing continued compatibility with Windows XP because X2Go Client can be part of an
  organization's solution to migrate away from Windows XP to Linux. (Because with X2Go, the user's applications run on Linux, not on Windows.) We intend to maintain XP compatibility until at least April 30th 2015, unless major technical obstacles arise.
  
  === PulseAudio 5.0 ===
- PulseAudio 5.0 is now bundled instead of PulseAudio 1.1. Furthermore, 5.0 has been patched to incldue the fix for bug #363 (choppy audio in Flash Player). This eliminates the need for a separate "interims" builds with PulseAudio 0.9.6
+ PulseAudio 5.0 is now bundled instead of PulseAudio 1.1. Furthermore, 5.0 has been patched to include the fix
for bug #363 (choppy audio in Flash Player). This eliminates the need for a separate "interims" builds with PulseAudio 0.9.6
  
  Special thanks to Tanu Kaskinen and other members of the upstream PulseAudio project for making this possible.
  
  PulseAudio 5.0 win32 is built via the OBS here:
@@ -65,6 +65,9 @@
  ===== Windows-Specific Bug Fixes =====
  As mentioned in the regular release notes:
      *Reapply KDE on Windows's patch for Pageant support to libssh 0.5.5. (Fixes: #448)
      *The regular build X2Go Client now includes a fix for bug #363 (choppy audio in Flash Player). Users no longer need to install an "interims" build for that a fix.
+ 
  The following bugfixes are not mentioned in the regular release notes. (They are not mentioned in the regular release notes because they do not consist of fixes to X2GoClient's source code, only to the dependencies bundled.):
+     *CVE-2014-0160 "Heartbleed" vulnerability (Note: X2Go Client was only affected by the heartbleed
vulnerability when connecting to a an X2Go session broker over HTTPS. Even though X2Go Client uses libssh and cygwin's openssh, which both in turn use openssl, they were never affected because the SSH protocol does not contain the SSL heartbeat. For more info on why SSH implementations are not affected, read [[https://access.redhat.com/site/solutions/786603|Red hat's solution article.]]. The only difference between that solution article and X2Go Client is that the vulnerable library file is ssleay32.dll and the non-affected library files are both libeay32.dll and cygcrypto-1.0.0.dll .) 
+     *The following security vulnerabilities in VcXsrv: CVE-2013-4396 (Oct. 8, 2013), CVE-2013-6462 (Jan. 7, 2014) (Note that we have not determined whether or not X2Go could actually trigger them. They are however now fixed in the VcXsrv code.)
      *



-- 
This mail was generated by DokuWiki at
http://wiki.x2go.org/




More information about the x2go-commits mailing list