-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Dear all,

This is to announce a new Windows-specific release of the X2Go
component ,,x2goclient''

The changes in this release of ,,x2goclient'' are:

  o Windows: Cygwin Bash (sh.exe) updated from 4.1.10-4 to 4.1.14-7.
This fixes the "Shellshock" vulnerability.

For the exact details of the Cygwin Bash update, see the Cygwin
project's release announcement for Cygwin Bash 4.1.14-7:
https://cygwin.com/ml/cygwin-announce/2014-09/msg00040.html

The X2Go project has not done an analysis of whether X2Go Client was
actually affected by the "Shellshock" vulnerability. However, as a
precaution, we are releasing this updated build of X2Go Client for
Windows with the fixed Cygwin Bash. Unless an analysis is performed,
we strongly encourage all users to update. This includes users of the
"misc" fonts and "full" fonts builds.

If you are using a X2Go Client for Linux, FreeBSD, or Mac OS X, the OS
will provide the updated Bash package.

For the Windows-specific release notes for this release, see this page:
http://wiki.x2go.org/doku.php/doc:release-notes-mswin:x2goclient-4.0.2.1

Regards,
Mike DePaulo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)

iF4EAREIAAYFAlQqtM0ACgkQIFy22CVQsiso4wD7BgZ4bLyEIGOUV97xa3BFz4Wc
6yj2wQh/xfImV4U0hHgA/1tfsK11CTjsqH4r0mXoBaxfJsSBb0GgjjG0oeGLK8At
=zmxP
-----END PGP SIGNATURE-----
_______________________________________________
x2go-announcements mailing list
x2go-announcements@lists.x2go.org
http://lists.x2go.org/listinfo/x2go-announcements

Reply via email to