Differences

This shows you the differences between two versions of the page.

--- doc:release-notes-mswin:x2goclient-4.0.3.2 [2015/02/25 12:12]
mikedep333 Remove draft warning
+++ doc:release-notes-mswin:x2goclient-4.0.3.2 [2015/02/25 12:18]
mikedep333 Security Update: 4.0.3.2-20150224
@@ Line 1: / Line 1: @@
 ====== Windows-Specific Release notes for X2Go Client 4.0.3.2 ======
+===== Security Update: 4.0.3.2-20150224 =====
+On 2015-02-25, 4.0.3.2-20150224 was released with the following changes:
+    - Windows: Bundle new version of VcXsrv: 1.15.2.3-xp+vc2013+x2go1. The difference from 1.15.2.2-xp+vc2013+x2go1 is that CVE-2015-0255 has been fixed.
+    - Windows: Update bundled nxproxy (nx-libs-lite) from 3.5.0.27 to 3.5.0.28.
+    - Windows: Update bundled Cygwin libjpeg-turbo from 1.3.1-1 to 1.3.1-3. The difference is that CVE-2014-9092 has been fixed.
+    - Windows: Update bundled Cygwin libpng from 1.5.18-1 to 1.5.21-2. In addition to other changes, CVE-2013-6954 has been fixed.
+    - Windows: Copy the exact version of each cygwin DLL from the cygwin binary tarballs rather than copying the "rebased" version from an X2Go developer's cygwin installation. What effect this will have on users is TBD. However, it does mean that we are distributing the exact DLLs that the Cygwin project provides, which is desirable for security.
+As with most vulnerabilities in 3rd party software, the X2Go project has not done an analysis of whether X2Go Client was actually affected by these vulnerabilities. However, as a precaution, we strongly encourage all users to update.
 ===== Major Windows-specific changes since 4.0.3.1-20150119 =====
@@ Line 7: / Line 18: @@
 ===== Available Builds =====
-All builds with version "4.0.3.2-20150219" in their filename are current.
+All builds with version "4.0.3.2-20150224" in their filename are current.
 ==== Current Builds ====
+The regular build, x2goclient-4.0.3.2-20150224-setup.exe, is available under this folder:
+  * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150224/
+A debug build, x2goclient-4.0.3.2-20150224-debug-setup.exe, is also available under the folder listed below. If you experience a bug and would like to assist with debugging it, this build is for you.
+  * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150224/non-default-builds/
+==== Previous Builds ====
 The regular build, x2goclient-4.0.3.2-20150219-setup.exe, is available under this folder:
@@ Line 17: / Line 37: @@
   * http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.3.2-20150219/non-default-builds/
 ===== Supported Windows Versions =====
 X2Go Client is currently only released as a 32-bit x86 build. Both 32-bit x86 and 64-bit x86 versions of Windows are supported via this build.

X2Go - everywhere@home

User Tools

Site Tools

Differences

Page Tools