Hi, This update fixes some critical issues, in particular weaknesses in the initial authentication exchange. Updating immediately is very strongly recommended unless you are absolutely certain that your network connections cannot be snooped upon, or if you already use an encryption layer (AES or preferably SSL connections)
If, for whatever reason, you are unable to update immediately: * the server update is more important, it contains some mitigation code * enable SSL or AES There are no MacOS builds for the LTS branch at present, please switch to a newer version instead. Release notes: * fix authentication weaknesses in client salt handling * fix window icons going back to default on window re-initialization * fix stop command on MS Windows servers via named-pipe connections * fix sound subprocess exit warnings on MS Windows * fix spurious key events for numlock on Mac OS * fix mDNS and IPv6 platform bugs (MS Windows and Mac OS) * fix unicode warnings on MS Windows * fix typo hiding pretty debug logging * fix Mac OS shadow servers * fix application name shown in notifications (X11) * fix webcam library issues causing client to fail to start * fix handling of client connection failures * fix paint issues with padded windows (ie: desktop servers maximized) * fix out-of-bounds array access in RandR cython glue * fix RPM building python3 modules twice (and with wrong arguments) * fix X11 crashes with the OpenGL client and some buggy drivers * fix parsing order of configuration files * fix compatibility with ffmpeg 3.4 * fix timer warning race condition on window cleanup * more reliable scaling value rounding * don't show start command dialog if the server does not support it * validate window dimensions early to prevent DoS * support newer versions of brotli * support CUDA 9, prefer newer SDK versions * support Ubuntu Artful * choose the strongest digest first * add mesa-dri-drivers dependency to RPM packages for OpenGL support * add support for Volta GPUs with NVENC * make it easier to disable firewall scripts in RPM builds Source: https://xpra.org/trac/wiki/Source Downloads: https://xpra.org/trac/wiki/Download Cheers Antoine _______________________________________________ shifter-users mailing list [email protected] http://lists.devloop.org.uk/mailman/listinfo/shifter-users
