[X2Go-Commits] page changed: doc:release-notes-mswin:x2goclient-4.0.3.2

[wiki-admin at x2go.org]

A page in your DokuWiki was added or changed. Here are the details:

Date        : 2015/03/29 21:32
Browser     : Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36
IP-Address  : 71.175.97.130
Hostname    : pool-71-175-97-130.phlapa.fios.verizon.net
Old Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2?rev=1425213198
New Revision: http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2
Edit Summary: 4.0.3.2-20150329
User        : mikedep333

@@ -1,6 +1,28 @@
  ====== Windows-Specific Release notes for X2Go Client 4.0.3.2 ======
  
+ ===== Security Update: 4.0.3.2-20150301 =====
+ 
+ On 2015-03-29, 4.0.3.2-20150329 was released with the following changes:
+ <code>
+     - Windows: Update bundled VcXsrv from 1.15.2.2-xp+vc2013+x2go1 to
+       1.15.2.5 (X2Go/Arctica Build)
+       The differences relevant to X2Go are:
+         + CVE-2015-0255 was fixed in VcXsrv itself
+      
  + VcXsrv's bundled version of openssl was updated from 1.0.1k
+           to 1.0.1m (fixes the multiple CVEs announced on 2015-03-19)
+         + VcXsrv's bundled version of libXfont was updated from 1.4.8
+           to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804)
+         + VcXsrv's bundled version of freetype was updated from 2.5.3
+           to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675)
+     - Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m,
+       which fixes the multiple CVEs announced on 2015-03-19.
+     - Windows: Update bundled PuTTY from 0.63 to 0.64.
+       In addition to other changes, CVE-2015-2157 has been fixed.
+     - Windows: Update bundled Cygwin openssl from 1.0.1k-1 to 1.0.2a-1.
+       This update fixes the multiple CVEs announced on 2015-03-19
+ </code>
+ As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as
a precaution, we strongly encourage all users to update.
  ===== Security Update: 4.0.3.2-20150301 =====
  
  On 2015-03-01, 4.0.3.2-20150301 was released with the following changes:
  
@@ -27,22 +49,24 @@
  All builds with version "4.0.3.2-20150301" in their filename are current.
  
  ==== Current Builds ====
  
- The regular build, x2goclient-4.0.3.2-20150301-setup.exe, is available under this folder:
-   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150301/
+ The regular build, x2goclient-4.0.3.2-20150329-setup.exe, is available under this folder:
+   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150329/
  
- A debug build, x2goclient-4.0.3.2-20150301-debug-setup.exe, is also available under the folder listed below. If you experience a bug and would like to assist with debugging it, this build is for you.
+ A debug build, x2goclient-4.0.3.2-20150329-debug-setup.exe, is also available under the folder listed below. If you
experience a bug and would like to assist with debugging it, this build is for you.
  
-   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150301/non-default-builds/
+   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150329/non-default-builds/
  
  ==== Previous Builds ====
  
  The regular builds, x2goclient-4.0.3.2-20150219-setup.exe through x2goclient-4.0.3.2-20150224-setup.exe, are available under these folders:
+   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150301/
    * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150224/
    * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150219/
  
  The debug builds, x2goclient-4.0.3.2-20150219-debug-setup.exe through x2goclient-4.0.3.2-20150301-setup.exe, are also available under these folders. If you experience a bug and would like to assist with debugging it, these builds are for you.
+   *
http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150301/non-default-builds/
    * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150224/non-default-builds/
    * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150219/non-default-builds/
  ===== Supported Windows Versions =====
  X2Go Client is currently only released as a 32-bit x86 build. Both 32-bit x86 and 64-bit x86 versions of Windows are supported via this build.



-- 
This mail was generated by DokuWiki at
http://wiki.x2go.org/