[winswitch] [ANNOUNCE] Xpra 2.1.3 : critical fixes

[Antoine Martin]

Hi,

This update fixes some critical issues, in particular weaknesses in the
initial authentication exchange. Updating immediately is very strongly
recommended unless you are absolutely certain that your network
connections cannot be snooped upon, or if you already use an encryption
layer (AES or preferably SSL connections)

If, for whatever reason, you are unable to update immediately:
* the server update is more important, it contains some mitigation code
* enable SSL or AES


Release notes:
* fix shadow servers connected to X11 servers without XShm
* fix handling of gstreamer plugin failures
* fix network constants causing packet failures with Python3
* fix authentication weaknesses in client salt handling
* fix delayed screen updates with the HTML5 client
* fix modifier handling, especially for shadow servers or native keymaps
* fix application name shown in notifications (X11)
* fix webcam library issues causing client to fail to start
* fix handling of client connection failures
* fix paint issues with padded windows (ie: desktop servers maximized)
* fix out-of-bounds array access in RandR cython glue
* fix RPM building python3 modules twice (and with wrong arguments)
* fix rare scrolling detection error on first pass
* fix HTML5 time values and scroll paint order
* fix X11 crashes with the OpenGL client and some buggy drivers
* fix parsing order of configuration files
* fix compatibility with ffmpeg 3.4
* fix timer warning race condition on window cleanup
* more reliable scaling value rounding
* don't show start command dialog if the server does not support it
* validate window dimensions early to prevent DoS
* support newer versions of brotli
* support CUDA 9, prefer newer SDK versions
* support Ubuntu Artful
* logging typos


Source:
https://xpra.org/trac/wiki/Source
Downloads:
https://xpra.org/trac/wiki/Download

Cheers
Antoine