This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
doc:release-notes-mswin:x2goclient-4.0.3.2 [2015/03/29 21:32] mikedep333 4.0.3.2-20150329 |
doc:release-notes-mswin:x2goclient-4.0.3.2 [2015/05/09 02:25] (current) mikedep333 4.0.3.2-20150508 |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== Windows-Specific Release notes for X2Go Client 4.0.3.2 ====== | ====== Windows-Specific Release notes for X2Go Client 4.0.3.2 ====== | ||
- | ===== Security Update: 4.0.3.2-20150301 | + | ===== Security Update: 4.0.3.2-20150508 ===== |
+ | |||
+ | On 2015-05-08, 4.0.3.2-20150508 was released with the following changes: | ||
+ | < | ||
+ | - Windows: Update bundled VcXsrv from 1.15.2.5 (X2Go/ | ||
+ | Build) to 1.15.2.6 (X2Go/ | ||
+ | The differences relevant to X2Go are: | ||
+ | + CVE-2015-3418 was fixed in VcXsrv itself | ||
+ | + Font files no longer differ in each build due to timestamp | ||
+ | differences | ||
+ | - Windows: Update libssh from 0.6.4 to 0.6.5 (while maintaining | ||
+ | Pageant support). This fixes CVE-2015-3146. | ||
+ | </ | ||
+ | As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update. | ||
+ | ===== Security Update: 4.0.3.2-20150329 | ||
On 2015-03-29, 4.0.3.2-20150329 was released with the following changes: | On 2015-03-29, 4.0.3.2-20150329 was released with the following changes: | ||
< | < | ||
- | - Windows: Update bundled VcXsrv from 1.15.2.2-xp+vc2013+x2go1 to | + | - Windows: Update bundled VcXsrv from 1.15.2.4-xp+vc2013+x2go1 to |
1.15.2.5 (X2Go/ | 1.15.2.5 (X2Go/ | ||
The differences relevant to X2Go are: | The differences relevant to X2Go are: | ||
- | + CVE-2015-0255 was fixed in VcXsrv itself | ||
+ VcXsrv' | + VcXsrv' | ||
to 1.0.1m (fixes the multiple CVEs announced on 2015-03-19) | to 1.0.1m (fixes the multiple CVEs announced on 2015-03-19) | ||
+ VcXsrv' | + VcXsrv' | ||
to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) | to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) | ||
- | + VcXsrv' | ||
- | to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675) | ||
- Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m, | - Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m, | ||
which fixes the multiple CVEs announced on 2015-03-19. | which fixes the multiple CVEs announced on 2015-03-19. | ||
Line 47: | Line 58: | ||
===== Available Builds ===== | ===== Available Builds ===== | ||
- | All builds with version " | + | All builds with version " |
==== Current Builds ==== | ==== Current Builds ==== | ||
- | The regular build, x2goclient-4.0.3.2-20150329-setup.exe, is available under this folder: | + | The regular build, x2goclient-4.0.3.2-20150508-setup.exe, is available under this folder: |
- | * http:// | + | * http:// |
- | A debug build, x2goclient-4.0.3.2-20150329-debug-setup.exe, | + | A debug build, x2goclient-4.0.3.2-20150508-debug-setup.exe, |
- | * http:// | + | * http:// |
==== Previous Builds ==== | ==== Previous Builds ==== | ||
- | The regular builds, x2goclient-4.0.3.2-20150219-setup.exe through x2goclient-4.0.3.2-20150224-setup.exe, are available under these folders: | + | The regular builds, x2goclient-4.0.3.2-20150219-setup.exe through x2goclient-4.0.3.2-20150329-setup.exe, are available under these folders: |
+ | * http:// | ||
* http:// | * http:// | ||
* http:// | * http:// | ||
* http:// | * http:// | ||
- | The debug builds, x2goclient-4.0.3.2-20150219-debug-setup.exe through x2goclient-4.0.3.2-20150301-setup.exe, are also available under these folders. If you experience a bug and would like to assist with debugging it, these builds are for you. | + | The debug builds, x2goclient-4.0.3.2-20150219-debug-setup.exe through x2goclient-4.0.3.2-20150329-setup.exe, are also available under these folders. If you experience a bug and would like to assist with debugging it, these builds are for you. |
+ | * http:// | ||
* http:// | * http:// | ||
* http:// | * http:// | ||
Line 78: | Line 91: | ||
* Windows 8 | * Windows 8 | ||
* Windows 8.1 (with or without " | * Windows 8.1 (with or without " | ||
- | * Windows 10 Technical Preview (Build 9926) | + | * Windows 10 Technical Preview (Build 9926 through 10074) |
These versions of Windows without the latest (specified) service pack may be compatible, but are rarely (if ever) tested. They are not officially supported. | These versions of Windows without the latest (specified) service pack may be compatible, but are rarely (if ever) tested. They are not officially supported. | ||
Line 89: | Line 102: | ||
* Windows Server 2012 | * Windows Server 2012 | ||
* Windows Server 2012 R2 (with or without " | * Windows Server 2012 R2 (with or without " | ||
- | * Windows Server Technical Preview (Build 9926) | + | * Windows Server Technical Preview (Build 9926 through 10074) |
Any incompatibility or bug with a specific version of Windows should be reported via our bug-tracker. | Any incompatibility or bug with a specific version of Windows should be reported via our bug-tracker. |