[X2Go-Commits] [x2goclient] 01/01: Changelog: Specify updates to third-party components for Windows

git-admin at x2go.org git-admin at x2go.org
Sat Jun 28 15:33:40 CEST 2014


This is an automated email from the git hooks/post-receive script.

x2go pushed a commit to branch master
in repository x2goclient.

commit 3a349d111ab34384a4fb25c8ed62845dc9e3d55b
Author: Mike DePaulo <mikedep333 at gmail.com>
Date:   Sat Jun 28 09:33:21 2014 -0400

    Changelog: Specify updates to third-party components for Windows
---
 debian/changelog |   14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index 5bae0f7..c6abff7 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -37,6 +37,20 @@ x2goclient (4.0.2.1-0x2go1) UNRELEASED; urgency=low
     - Windows: Enable PulseAudio log when --debug is passed.
     - Windows: Fix compatibility with current PulseAudio master branch
     - Windows: Reduce size of NSIS installer by switching to lzma solid compression
+    - Windows: cygwin packages (inluding patched OpenSSH 6.6.1p1-3) updated from
+      latest versions as of 2014-04-08 to latest versions as of 2014-06-09. This
+      includes openssl 1.0.1h-1, which fixes the 6 CVEs announced on 2014-06-05.
+      (Cygwin openssl was also individually updated to 1.0.1h-1 in
+      4.0.2.0+build4.) This also includes migrating from libjpeg to
+      libjpeg-turbo, which reduces CPU usage of nxproxy.)
+    - Windows: nx-libs-lite updated from 3.5.0.22 to 3.5.0.24
+      (linked against aforementioned cygwin package versions)
+    - Windows: Win32 OpenSSL updated from 1.0.1g to 1.0.1h, which fixes the 6
+      CVEs announced on 2014-06-05.
+      (Win32 OpenSSL was also updated to 1.0.1h in 4.0.2.0+build3.)
+    - Windows: VcXsrv (XP Compatible) updated from 1.14.3.1 to 1.14.3.2.
+      Fixes CVE-2014-0209, CVE-2014-0210, and CVE-2014-0211 
+      (VcXsrv was also updated to 1.14.3.2 in 4.0.2.0+build2.)
 
  -- Mike Gabriel <mike.gabriel at das-netzwerkteam.de>  Thu, 10 Apr 2014 18:30:25 +0200
 

--
Alioth's /srv/git/_hooks_/post-receive-email on /srv/git/code.x2go.org/x2goclient.git


More information about the x2go-commits mailing list