[X2Go-Commits] page changed: doc:release-notes-mswin:x2goclient-4.0.3.2

wiki-admin at x2go.org wiki-admin at x2go.org
Wed Feb 25 13:18:09 CET 2015


A page in your DokuWiki was added or changed. Here are the details:

Date        : 2015/02/25 12:18
Browser     : Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.115 Safari/537.36
IP-Address  : 71.175.97.130
Hostname    : pool-71-175-97-130.phlapa.fios.verizon.net
Old Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2?rev=1424866350
New Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2
Edit Summary: Security Update: 4.0.3.2-20150224
User        : mikedep333

@@ -1,23 +1,42 @@
  ====== Windows-Specific Release notes for X2Go Client 4.0.3.2 ======
  
+ ===== Security Update: 4.0.3.2-20150224 =====
+ 
+ On 2015-02-25, 4.0.3.2-20150224 was released with the following changes:
+ 
+     - Windows: Bundle new version of VcXsrv: 1.15.2.3-xp+vc2013+x2go1. The difference from 1.15.2.2-xp+vc2013+x2go1 is that CVE-2015-0255 has been fixed.
+     - Windows: Update bundled nxproxy
(nx-libs-lite) from 3.5.0.27 to 3.5.0.28.
+     - Windows: Update bundled Cygwin libjpeg-turbo from 1.3.1-1 to 1.3.1-3. The difference is that CVE-2014-9092 has been fixed.
+     - Windows: Update bundled Cygwin libpng from 1.5.18-1 to 1.5.21-2. In addition to other changes, CVE-2013-6954 has been fixed.
+     - Windows: Copy the exact version of each cygwin DLL from the cygwin binary tarballs rather than copying the "rebased" version from an X2Go developer's cygwin installation. What effect this will have on users is TBD. However, it does mean that we are distributing the exact DLLs that the Cygwin project provides, which is desirable for security.
+ 
+ As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update.
  ===== Major Windows-specific changes since 4.0.3.1-20150119 =====
  
  None.
  
  ===== Available
Builds =====
  
- All builds with version "4.0.3.2-20150219" in their filename are current.
+ All builds with version "4.0.3.2-20150224" in their filename are current.
  
  ==== Current Builds ====
+ 
+ The regular build, x2goclient-4.0.3.2-20150224-setup.exe, is available under this folder:
+   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150224/
+ 
+ A debug build, x2goclient-4.0.3.2-20150224-debug-setup.exe, is also available under the folder listed below. If you experience a bug and would like to assist with debugging it, this build is for you.
+ 
+   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150224/non-default-builds/
+ 
+ ==== Previous Builds ====
  
  The regular build, x2goclient-4.0.3.2-20150219-setup.exe, is available under this folder:
    * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150219/
  
  A debug build, x2goclient-4.0.3.2-20150219-debug-setup.exe, is also available under
the folder listed below. If you experience a bug and would like to assist with debugging it, this build is for you.
  
    * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150219/non-default-builds/
- 
  ===== Supported Windows Versions =====
  X2Go Client is currently only released as a 32-bit x86 build. Both 32-bit x86 and 64-bit x86 versions of Windows are supported via this build.
  
    * Windows XP 32-bit SP3



-- 
This mail was generated by DokuWiki at
http://wiki.x2go.org/



More information about the x2go-commits mailing list