novnc/novnc.changes
Dirk Mueller 762900fde2 - Update to 0.6.2:
_This is a vulnerability fix release._
  Fixes a XSS issue in which the remote VNC server could inject
  arbitrary HTML into the noVNC web page via the messages propagated
  to the status field, such as the VNC server name.
  This affects users of vnc_auto.html and vnc.html, as well as any
  users of include/ui.js.

OBS-URL: https://build.opensuse.org/package/show/Cloud:OpenStack:Factory/novnc?expand=0&rev=17
2017-07-22 08:13:05 +00:00

65 lines
2.3 KiB
Plaintext

-------------------------------------------------------------------
Sat Jul 22 08:11:49 UTC 2017 - dmueller@suse.com
- Update to 0.6.2:
_This is a vulnerability fix release._
Fixes a XSS issue in which the remote VNC server could inject
arbitrary HTML into the noVNC web page via the messages propagated
to the status field, such as the VNC server name.
This affects users of vnc_auto.html and vnc.html, as well as any
users of include/ui.js.
-------------------------------------------------------------------
Mon Dec 7 16:42:51 UTC 2015 - dvaleev@suse.com
- Package is definetely noarch. Mark as such
-------------------------------------------------------------------
Mon Feb 16 23:59:26 UTC 2015 - vuntz@suse.com
- Update to 0.5.1:
+ Improved keyboard support via use of keysyms.js
+ Fix HEXTILE "blank" tile support
+ lower minimum width to accommodate smaller screens
+ Fix issue causing true-color cursors to not be changed
+ Fix subprotocol support for the TIGHT encoding
- Changes from 0.5.0:
+ General Fixes/Improvements:
- Use Object.defineProperty on Array prototype to prevent
issues with enumeration
- Internal Refactor for improved testability
- Improved parsing of query string parameters
- Support container page scrolling
- Fixed IE10 keyboard support
- Fixes for mobile keyboards (Android and iOS)
- Improved foreign keyboard support
- dynamic script loading without document.write
+ Protocol Support:
- TightVNC support (we support choosing the NOTUNNEL type if
tunnels are requested)
- XVP Support
- Update license tag to "MPL-2.0; LGPL-3.0", following relicensing.
- Drop novnc-0.3-call-websockify.patch,
novnc-0.3-nova-wsproxy.patch: not needed anymore.
-------------------------------------------------------------------
Tue Sep 24 19:38:06 UTC 2013 - dmueller@suse.com
- update to 0.4:
* Clarify permissive licenses of HTML, CSS, images.
* Use render queue and requestAnimationFrame
* UltraVNC repeater support
-------------------------------------------------------------------
Tue Mar 19 00:01:00 UTC 2013 - berendt@b1-systems.de
- removed openstack-nova-novncproxy
-------------------------------------------------------------------
Wed Oct 10 00:01:00 UTC 2012 - berendt@b1-systems.de
- make it buildable for SLES11 SP2
- import from Fedora 18