On 2015-01-19, 4.0.3.1-20150119 was released with the following changes:

1. Windows: Win32 OpenSSL updated from 1.0.1j to 1.0.1L, which fixes the CVEs announced on 2015-01-08.
2. Windows: Cygwin OpenSSL updated from 1.0.1j-1 to 1.0.1k-1, which fixes the CVEs announced on 2015-01-08.
3. Windows: Bundle new version of VcXsrv: 1.15.2.2-xp+vc2013+x2go1. The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed.
4. Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining Pageant support). This fixes CVE-2014-8132, which shouldn't affect x2goclient because x2goclient uses the SSH client functionality, not the SSH server functionality. 0.6.4 also added 4 features related to ECDSA keys.

As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities (except for libssh CVE-2014-8132.) However, as a precaution, we are releasing this updated build of X2Go Client for Windows. Unless an analysis is performed for each vulnerability, we strongly encourage all users to update.

None.

All builds with version “4.0.3.1-20150119” in their filename are current.

The regular build, x2goclient-4.0.3.1-20150119-setup.exe, is available under this folder:

• http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.1-20150119/

A debug build, x2goclient-4.0.3.1-20150119-debug-setup.exe, is also available under the folder listed below. If you experience a bug and would like to assist with debugging it, this build is for you.

• http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.1-20150119/non-default-builds/

The regular build, x2goclient-4.0.3.1-20141214-setup.exe, is available under this folder:

• http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.1-20141214/

A debug build, x2goclient-4.0.3.1-20141214-debug-setup.exe, is also available under the folder listed below. If you experience a bug and would like to assist with debugging it, this build is for you.

• http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.1-20141214/non-default-builds/

X2Go Client is currently only released as a 32-bit x86 build. Both 32-bit x86 and 64-bit x86 versions of Windows are supported via this build.

• Windows XP 32-bit SP3
• Windows XP 64-bit SP2
• Windows Vista SP2
• Windows 7 SP1
• Windows 8
• Windows 8.1 (with or without “Update 1”)

These versions of Windows without the latest (specified) service pack may be compatible, but are rarely (if ever) tested. They are not officially supported.

Corresponding server versions of Windows are also supported, but receive minimal testing:

• Windows Server 2003 SP2
• Windows Server 2003 R2 SP2
• Windows Server 2008 SP2
• Windows Server 2008 R2 SP1
• Windows Server 2012
• Windows Server 2012 R2 (with or without “Update 1”)

Any incompatibility or bug with a specific version of Windows should be reported via our bug-tracker.

See this page:

• http://wiki.x2go.org/doku.php/doc:installation:x2goclient

None

bug 611 The server cannot be added to the known_hosts file (and thus you cannot connect to the server) when both of these conditions are met: 1. Your Windows username has non-English characters. 2 Those characters are in a different language than the Windows “system locale”.

TODO: List more bugs