User Tools

Site Tools


doc:release-notes-mswin:x2goclient-4.0.3.1

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
doc:release-notes-mswin:x2goclient-4.0.3.1 [2014/12/14 16:40]
mikedep333 [Windows-Specific Bug Fixes] "None"
doc:release-notes-mswin:x2goclient-4.0.3.1 [2015/01/19 14:28] (current)
mikedep333 [Security Update: 4.0.3.1-20150119] typo
Line 1: Line 1:
 ====== Windows-Specific Release notes for X2Go Client 4.0.3.1 ====== ====== Windows-Specific Release notes for X2Go Client 4.0.3.1 ======
 +
 +===== Security Update: 4.0.3.1-20150119 =====
 +
 +On 2015-01-19, 4.0.3.1-20150119 was released with the following changes:
 +
 +    - Windows: Win32 OpenSSL updated from 1.0.1j to 1.0.1L, which fixes the CVEs announced on 2015-01-08.
 +    - Windows: Cygwin OpenSSL updated from 1.0.1j-1 to 1.0.1k-1, which fixes the CVEs announced on 2015-01-08.
 +    - Windows: Bundle new version of VcXsrv: 1.15.2.2-xp+vc2013+x2go1. The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed.
 +    - Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining Pageant support). This fixes CVE-2014-8132,​ which shouldn'​t affect x2goclient because x2goclient uses the SSH client functionality,​ not the SSH server functionality. 0.6.4 also added 4 features related to ECDSA keys.
 +
 +As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities (except for libssh CVE-2014-8132.) However, as a precaution, we are releasing this updated build of X2Go Client for Windows. Unless an analysis is performed for each vulnerability,​ we strongly encourage all users to update.
  
 ===== Major Windows-specific changes since 4.0.3.0-20141021 ===== ===== Major Windows-specific changes since 4.0.3.0-20141021 =====
Line 7: Line 18:
 ===== Available Builds ===== ===== Available Builds =====
  
-All builds with version "​4.0.3.1-20141214" in their filename are current.+All builds with version "​4.0.3.1-20150119" in their filename are current.
  
 ==== Current Builds ==== ==== Current Builds ====
 +
 +The regular build, x2goclient-4.0.3.1-20150119-setup.exe,​ is available under this folder:
 +  * http://​code.x2go.org/​releases/​binary-win32/​x2goclient/​releases/​4.0.3.1-20150119/​
 +
 +A debug build, x2goclient-4.0.3.1-20150119-debug-setup.exe,​ is also available under the folder listed below. If you experience a bug and would like to assist with debugging it, this build is for you.
 +
 +  * http://​code.x2go.org/​releases/​binary-win32/​x2goclient/​releases/​4.0.3.1-20150119/​non-default-builds/​
 +
 +==== Previous Builds ====
  
 The regular build, x2goclient-4.0.3.1-20141214-setup.exe,​ is available under this folder: The regular build, x2goclient-4.0.3.1-20141214-setup.exe,​ is available under this folder:
Line 49: Line 69:
  
 [[http://​bugs.x2go.org/​cgi-bin/​bugreport.cgi?​bug=611|bug 611]] The server cannot be added to the known_hosts file (and thus you cannot connect to the server) when both of these conditions are met: 1. Your Windows username has non-English characters. 2 Those characters are in a different language than the Windows "​system locale"​. [[http://​bugs.x2go.org/​cgi-bin/​bugreport.cgi?​bug=611|bug 611]] The server cannot be added to the known_hosts file (and thus you cannot connect to the server) when both of these conditions are met: 1. Your Windows username has non-English characters. 2 Those characters are in a different language than the Windows "​system locale"​.
 +
 +TODO: List more bugs
doc/release-notes-mswin/x2goclient-4.0.3.1.1418575247.txt.gz ยท Last modified: 2014/12/14 16:40 by mikedep333