[X2Go-Commits] page changed: doc:release-notes-mswin:x2goclient-4.0.4.0

[wiki-admin at x2go.org]

A page in your DokuWiki was added or changed. Here are the details:

Date        : 2015/06/26 02:43
Browser     : Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.130 Safari/537.36
IP-Address  : 96.245.198.248
Hostname    : pool-96-245-198-248.phlapa.fios.verizon.net
Old Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.4.0?rev=1432728879
New Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.4.0
Edit Summary: 4.0.4.0-2015.06.24
User        : mikedep333

@@ -1,17 +1,46 @@
  ====== Windows-Specific Release notes for X2Go Client 4.0.4.0 ======
  
+ ===== Security Update: 4.0.4.0-2015.06.24 =====
+ 
+ On 2015-06-25, 4.0.4.0-2015.06.24 was released with the following changes:
+ <code>
+     - Windows: Update bundled Win32 OpenSSL from 1.0.1m to 1.0.1o,
+       which fixes the multiple CVEs announced on 2015-06-11.
+     - Windows: Update bundled Cygwin OpenSSL from 1.0.2a-1 to 1.0.2c-1,
which
+       fixes the multiple CVEs announced on 2015-06-11.
+     - Windows: Update bundled VcXsrv from 1.17.0.0-1 (X2Go/Arctica Build)
+       to 1.17.0.0-2 (X2Go/Arctica Build)
+       The differences relevant to X2Go are:
+         + VcXsrv's bundled version of openssl was updated from 1.0.2a
+           to 1.0.2c (fixes the multiple CVEs announced on 2015-06-11)
+ </code>
+ As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update.
+ 
+ Also, there is now a build with a test fix for X2Go bug [[http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=883|#883]].
  ===== Major Windows-specific changes since 4.0.3.2-20150508 =====
  
    * Include debug build in the regular installer. It is an optional component during the install. It is not installed by default.
    * Include Pageant and PuTTYgen in the installer.
They are optional components during the install. They are installed by default.
    * Several 3rd-party components were upgraded to new major versions.
  
  ===== Available Builds =====
  
- There is now only 1 installer, which includes both the reglar build & the debug build. The installer with "4.0.4.0-2015.05.27" in its filename is current.
+ There are now (4.0.4.0-2015.06.24) 2 build.
+   * The regular build
+   * The build with the test fix for bug #883.
+ 
+ Both installers now include the regular build & the debug build of X2Go Client.
  
  ==== Current Release ====
+ 
+ The regular installer, x2goclient-4.0.4.0-2015.06.24-setup.exe , is available under this folder:
+   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.4.0-2015.06.24/
+ 
+ The installer with the test fix for bug #883, x2goclient-4.0.4.0-2015.06.24-setup.exe , is available under this folder:
+   *
http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.4.0-2015.06.24/non-default-builds/
+ 
+ ==== Previous Releases ====
  
  The installer x2goclient-4.0.4.0-2015.05.27-setup.exe is available under this folder:
    * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.4.0-2015.05.27/
  



-- 
This mail was generated by DokuWiki at
http://wiki.x2go.org/