Mike DePaulo | 9 May 04:33 2015
Picon

X2Go Client for Windows (4.0.3.2-20150508) released


Dear all,

This is to announce a new release of X2Go Client for Windows.

This is the 5th release of X2Go Client 4.0.3.2 for Windows. The 4th
release was 4.0.3.2-20150329. The changes are relative to that release.

The changes in this release are:
  o Windows: Update bundled VcXsrv from 1.15.2.5 (X2Go/Arctica
    Build) to 1.15.2.6 (X2Go/Arctica Build)
    The differences relevant to X2Go are:
      + CVE-2015-3418 was fixed in VcXsrv itself
      + Font files no longer differ in each build due to timestamp
        differences
  o Windows: Update libssh from 0.6.4 to 0.6.5 (while maintaining
    Pageant support). This fixes CVE-2015-3146.

As with most vulnerabilities in 3rd party software, the X2Go project
has not done an analysis of whether X2Go Client was actually affected
by these vulnerabilities. However, as a precaution, we strongly
encourage all users to update.

For the Windows-specific release notes for this release, see this page:
http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2

Regards,
Mike DePaulo
Mike DePaulo | 30 Mar 01:06 2015
Picon

X2Go Client for Windows (4.0.3.2-20150329) released


Dear all,

This is to announce a new release of X2Go Client for Windows.

This is the 4th release of X2Go Client 4.0.3.2 for Windows. The 3rd
release was 4.0.3.2-20150301. The changes are relative to that release.

The changes in this release are:
  o Windows: Update bundled VcXsrv from 1.15.2.4-xp+vc2013+x2go1 to
    1.15.2.5 (X2Go/Arctica Build)
    The differences relevant to X2Go are:
      + VcXsrv's bundled version of openssl was updated from 1.0.1k
        to 1.0.1m (Fixes the multiple CVEs announced on 2015-03-19)
      + VcXsrv's bundled version of libXfont was updated from 1.4.8
        to 1.4.9 (Fixes CVE-2015-1802 through CVE-2015-1804)
  o Windows: Update bundled Win32 OpenSSL from 1.0.1L to 1.0.1m,
    which fixes the multiple CVEs announced on 2015-03-19.
  o Windows: Update bundled PuTTY from 0.63 to 0.64.
    In addition to other changes, CVE-2015-2157 has been fixed.
  o Windows: Update bundled Cygwin openssl from 1.0.1k-1 to 1.0.2a-1.
    This update fixes the multiple CVEs announced on 2015-03-19

As with most vulnerabilities in 3rd party software, the X2Go project
has not done an analysis of whether X2Go Client was actually affected
by these vulnerabilities. However, as a precaution, we strongly
encourage all users to update.

For the Windows-specific release notes for this release, see this page:
http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2
(Continue reading)

Mihai Moldovan | 17 Mar 19:30 2015
Picon

NX redistributed (3.5.0.31) released

Dear all

This is yet another release to fix the upgrade on RPM-based systems with
packages from ,,nx-libs''.

The changes listed below address minor problems mostly on OS X and fix
the dependencies of generated RPM packages. If you do not build from
source and are not using RPM packages, you may skip this release at your
option.

We are hopeful that this will be the last hotfix in the library package
versioning/renaming aftermath.

X2Go Component: nx-libs
Version: 2:3.5.0.31
Status: RELEASE
Date: Tue, 17 Mar 2015 18:48:06 +0100
Changes:
 nx-libs (3.5.0.31) RELEASED; urgency=low
 .
   [ Clemens Lang ]
   * Use path discovery for finding makedepend. Remove old cruft. Adds:
     - 0070_nxcomp_use-MAKEDEPEND-in-path.full+lite.patch
     - 0071_nxcompext_use-MAKEDEPEND-in-path.full+lite.patch
     - 0072_nxcompshad_use-MAKEDEPEND-in-path.full+lite.patch
     - 0073_nxproxy_use-MAKEDEPEND-in-path.full+lite.patch
   * Fix dynamic library linking on OS X. Use -dynamiclib instead of
-bundle.
     Adds:
     - 0074_nxcomp_use-dynamiclib-flag-on-OS-X.full+lite.patch
(Continue reading)

Mike Gabriel | 14 Mar 14:51 2015
Picon

NX redsitributed (3.5.0.30) released

Dear all,

we just figured out an upgrade path problem with the latest ,,nx-libs''
release. The issue occurred with our Launchpad builds for Ubuntu.

To get this issue fixed immediately, I decided for the easiest approach:
bump (i.e. increment) the version of nx-libs to 3.5.0.30. This should make
x2goagent and associated libraries installable again on Ubuntu.

X2Go Component: nx-libs
Version: 2:3.5.0.30
Status: RELEASE
Date: Sat, 14 Mar 2015 14:37:58 +0100
Changes:
  nx-libs (3.5.0.30) RELEASED; urgency=low
  .
    [ Mike Gabriel ]
    * Version bump release of nx-libs to assure a working
      upgrade path on Ubuntu (where the build daemons strip-off
      the "-0x2goX" revision suffix from the package version.
  .
    [ X2Go Release Manager ]
    * debian/roll-tarball.sh:
      + Only clean up nx-X11 source tree if it is there (i.e., skip that
        for the nx-libs-lite tarball generation).

Regards,
Mike Gabriel

--

-- 
(Continue reading)

Mihai Moldovan | 13 Mar 17:07 2015
Picon

NX redistributed (3.5.0.29) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,nx-libs''.

New gains of this version of ,,nx-libs'' are:

  o further reduction of code size by Mike Gabriel (93MB -> 41MB
uncompressed, 16MB -> 6.5MB compressed)
  o ~/.x2go/config/keystrokes.cfg, /etc/x2go/keystrokes.cfg and
/etc/nxagent/keystrokes.cfg are now respected thanks to Horst Schirmeier
  o security fixes for CVE-2011-2895, CVE-2011-4028, CVE-2013-4396,
CVE-2013-6462, CVE-2014-0209, CVE-2014-0210, CVE-2014-0211,
CVE-2014-8092, CVE-2014-8097, CVE-2014-8095, CVE-2014-8096,
CVE-2014-8099, CVE-2014-8100, CVE-2014-8102, CVE-2014-8101,
CVE-2014-8093, CVE-2014-8098, CVE-2015-0255 by Michael DePaulo
  o Debian/Ubuntu packaging rework; libnx-x11 now split up into multiple
packages; new -dev packages; setting LD_LIBRARY_PATH now unnecessary;
new multi-arch support; new hardened support
  o libraries now versioned on RPM-based distros; miscellaneous RPM fixes
  o new patch naming scheme based on four digits
  o other (build) bug fixes

We thank Horst Schirmeier for improving our software.

X2Go Component: nx-libs
Version: 2:3.5.0.29
Status: RELEASE
Date: Fri, 13 Mar 2015 15:50:00 +0100
Fixes these bug report(s): 741 744
(Continue reading)

Stefan Baur | 9 Mar 23:48 2015
Picon

"X2Go: The Gathering 2015" starts 2015-06-19 - please respond ASAP if you want to participate!


Annuntio vobis gaudium magnum (I announce to you a great joy):

We have a new, finalized location and date for

+-----------------------------------------------------------------+
| X2Go: The Gathering 2015 - 2015-06-19 - 2015-06-21  <at>  Linuxhotel |
+-----------------------------------------------------------------+

This year's X2Go community event will once again be a three-day "work
and play" (coding, chatting, socializing) event at Linuxhotel, Essen,
Germany.  No sightseeing tour this year, as the feedback from last
year was that you folks want to spend more time coding and socialising
on-site or at the dinner table.

Special thanks to Linuxhotel for jumping in and renewing their offer,
as we had originally selected another location that didn't work out.

*ATTENTION!* If you want to join us *and* want to sleep in one of the
hotel rooms at the Linuxhotel, we need the number of beds and nights you
want to reserve, as well as *your full name* (as printed on your
passport) and *your nationality* by *2015-05-18* *23:59:59* *CEST* (yes,
that's 2015-05-18, *not* 2015-06-18)!!!  Very important!!!  After that
date, we will be unable to reserve a room for you!

It would be really really cool if you could sign up sooner - and
please also note that:
a) we curently have a maximum of 10 beds available. First come, first
   serve!
b) Most of our rooms this year will be single-bed rooms, which means
(Continue reading)

Mihai Moldovan | 6 Mar 06:41 2015
Picon

X2Go Desktop Sharing (3.1.1.2) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,x2godesktopsharing''.

New gains of this version of ,,x2godesktopsharing'' are:

  o new translations for Dutch, Danish, Finnish, Estonian and Turkish
languages
  o new support for openSUSE and SLE (sponsored by EuMetSat in
Darmstadt, Germany)
  o better support for RPM-based distributions
  o various bug fixes for x2godesktopsharing.desktop file
  o let session startup more time to come up

We thank Jos Wolfram, Mark Pedersen-Cook, Martti Pitkänen, Robert Parts and Kaan Özdinçer for
improving the internationalization support of our software.

X2Go Component: x2godesktopsharing
Version: 3.1.1.2
Status: RELEASE
Date: Fri, 06 Mar 2015 05:08:56 +0100
Changes:
 x2godesktopsharing (3.1.1.2) RELEASED; urgency=low
 .
   [ Jos Wolfram ]
   * New upstream version (3.1.1.2):
     - Update Dutch translation file.
 .
   [ Mike Gabriel ]
(Continue reading)

Mike DePaulo | 1 Mar 13:32 2015
Picon

X2Go Client for Windows (4.0.3.2-20150301) released


Dear all,

This is to announce a new release of X2Go Client for Windows.

This is the 3rd release of X2Go Client 4.0.3.2 for Windows. The 2nd
release was 4.0.3.2-20150224. The changes are relative to that release.

The changes in this release are:
  o Windows: Update bundled VcXsrv from 1.15.2.3-xp+vc2013+x2go1 to
    1.15.2.4-xp+vc2013+x2go1.
    The difference is that VcXsrv's bundled version of freetype was
    updated from 2.5.3 to 2.5.5.
    This freetype update fixes CVE-2014-9656 through CVE-2014-9675.

As with most vulnerabilities in 3rd party software, the X2Go project
has not done an analysis of whether X2Go Client was actually affected
by these vulnerabilities. However, as a precaution, we strongly
encourage all users to update.

For the Windows-specific release notes for this release, see this page:
http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2

Regards,
Mike DePaulo
Mike DePaulo | 25 Feb 13:29 2015
Picon

X2Go Client for Windows (4.0.3.2-20150224) released


Dear all,

This is to announce a new release of X2Go Client for Windows.

This is the 2nd release of X2Go Client 4.0.3.2 for Windows. The 1st
release was 4.0.3.2-20150219. The changes are relative to that release.

The changes in this release are:
  o Windows: Bundle new version of VcXsrv: 1.15.2.3-xp+vc2013+x2go1.
    The difference from 1.15.2.2-xp+vc2013+x2go1 is that CVE-2015-0255
    has been fixed.
  o Windows: Update bundled nxproxy (nx-libs-lite) from 3.5.0.27 to
    3.5.0.28.
  o Windows: Update bundled Cygwin libjpeg-turbo from 1.3.1-1 to
    1.3.1-3.
    The difference is that CVE-2014-9092 has been fixed.
  o Windows: Update bundled Cygwin libpng from 1.5.18-1 to 1.5.21-2.
    In addition to other changes, CVE-2013-6954 has been fixed.
  o Windows: Copy the exact version of each cygwin DLL from the cygwin
    binary tarballs rather than copying the "rebased" version from
    an X2Go developer's cygwin installation.
    What effect this will have on users is TBD. However, it does mean
    that we are distributing the exact DLLs that the Cygwin project
    provides, which is desirable for security.

As with most vulnerabilities in 3rd party software, the X2Go project
has not done an analysis of whether X2Go Client was actually affected
by these vulnerabilities. However, as a precaution, we strongly
encourage all users to update.
(Continue reading)

Mihai Moldovan | 25 Feb 00:32 2015
Picon

X2Go Server (4.0.1.19) released

Dear all

The X2Go project is proud to announce a new release of the X2Go
component ,,x2goserver''.

New gains of this version of ,,x2goserver'' are:

  o new support for openSUSE and SLE (sponsored by EuMetSat in
Darmstadt, Germany)
  o new instructions for the translation process thanks to Mark
Pedersen-Cook
  o cross-user X2Go Desktop Sharing working again
  o handle Active Directory usernames correctly when using SQLite
  o new man page for x2gogetapps with disclaimer suggested by Stefan Baur
  o a lot of bug fixes

The X2Go project thanks Mark Pedersen-Cook, Robert Siemer, Stefan Baur,
Matthew L. Dailey and Lars Wendler for their valuable input and
submitted work.

X2Go Component: x2goserver
Version: 4.0.1.19
Status: RELEASE
Date: Tue, 24 Feb 2015 21:49:22 +0100
Fixes these bug report(s): 405 632 633 638 644 664 668 671 672 675 676
678 697 698 700 712 715 727 728 770
Changes:
 x2goserver (4.0.1.19) RELEASED; urgency=medium
 .
   [ Mike Gabriel ]
(Continue reading)

Mike DePaulo | 19 Feb 14:59 2015
Picon

X2Go Client for Windows (4.0.3.2-20150219) released


Dear all,

This is to announce a new Windows-specific release of the X2Go
component ,,x2goclient''

This is the 1st release of X2Go Client 4.0.3.2 for Windows.

There are no changes in this release of ,,x2goclient'' compared
to the 4.0.3.2 release itself. You can read the list of changes in
4.0.3.2 in the following link. Note that many (but not all) of the
4.0.3.2 Windows changes were included in the 4.0.3.1-20150119 Windows-
specific release.
http://permalink.gmane.org/gmane.linux.terminal-server.x2go.announce/159

For the Windows-specific release notes for this release, see this page:
http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.3.2

Regards,
Mike DePaulo

Gmane