This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | Last revision Both sides next revision | ||
doc:release-notes-mswin:x2goclient-4.0.3.2 [2015/03/29 21:32] mikedep333 [Security Update: 4.0.3.2-20150301] typo fix |
doc:release-notes-mswin:x2goclient-4.0.3.2 [2015/03/29 23:07] mikedep333 [Security Update: 4.0.3.2-20150329] Whoops, the prior version of VcXsrv was 1.15.2.4 |
||
---|---|---|---|
Line 5: | Line 5: | ||
On 2015-03-29, 4.0.3.2-20150329 was released with the following changes: | On 2015-03-29, 4.0.3.2-20150329 was released with the following changes: | ||
< | < | ||
- | - Windows: Update bundled VcXsrv from 1.15.2.2-xp+vc2013+x2go1 to | + | - Windows: Update bundled VcXsrv from 1.15.2.4-xp+vc2013+x2go1 to |
1.15.2.5 (X2Go/ | 1.15.2.5 (X2Go/ | ||
The differences relevant to X2Go are: | The differences relevant to X2Go are: | ||
- | + CVE-2015-0255 was fixed in VcXsrv itself | ||
+ VcXsrv' | + VcXsrv' | ||
to 1.0.1m (fixes the multiple CVEs announced on 2015-03-19) | to 1.0.1m (fixes the multiple CVEs announced on 2015-03-19) | ||
+ VcXsrv' | + VcXsrv' | ||
to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) | to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804) | ||
- | + VcXsrv' | ||
- | to 2.5.5 (fixes CVE-2014-9656 through CVE-2014-9675) | ||
- Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m, | - Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m, | ||
which fixes the multiple CVEs announced on 2015-03-19. | which fixes the multiple CVEs announced on 2015-03-19. |