vino 3.7.3



About Vino
==========

Vino is a Virtual Network Computing (VNC) server for GNOME, that
allows you to share your desktop with remote clients.

ChangeLog
=========

2012-12-17  David King  <amigadave amigadave com>

	Update NEWS for 3.7.3 release

2012-12-17  Huzaifa Sidhpurwala  <huzaifas redhat com>

	Do not leak clipboard to unauthenticated clients

	vino_server_clipboard_cb() in vino-server.c is the callback which is
	triggered when a clipboard copy event is fired.

	After doing some initial checks, (1. If there are any connected clients,
	2. If the server is on hold etc), it converts the text to UTF-8 and then
	passes it on to rfbSendServerCutText(). Here data is pasted to each
	client, without verifying if the client is authenticated.

	The patch checks if the client is authenticated and only then it allows
	the clipboard text to be sent to it.

	Fixes bug 678434. This is a security issue, and has been assigned
	CVE-2012-4429:
	http://www.openwall.com/lists/oss-security/2012/09/14/1

2012-12-16  Fran Diéguez  <fran dieguez mabishu com>

	Updated Galician translations

2012-12-02  Dr.T.Vasudevan  <drtvasudevan gmail com>

	Updated Tamil translation

2012-11-23  Nilamdyuti Goswami  <ngoswami redhat com>

	Assamese translation updated

2012-11-22  ManojKumar Giri  <mgiri redhat com>

	Updated Odia Translation with FUEL implementation.

2012-11-12  ozu17928  <ozu17928 msb minsmail com>

	Set quality level if JPEG support is enabled

	Fixes bug 683793.

2012-11-10  Ryan Lortie  <desrt desrt ca>

	server/miniupnp/: -Wmissing-prototypes fixups


Download
========
http://download.gnome.org/sources/vino/3.7/vino-3.7.3.tar.xz (730K)
  sha256sum: 41e36982b5815412359dbfd0a10eb460e3907778a053279e34d5a49507d2cf6b



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]