NoMachine Support

Your questions answered

Knowledge Base

Searching in: Software Updates
Filter the search results
Released on:
Searching in: Software Updates
ID: SU11M00101
Released on:  2015-11-27
Last update: 2016-04-21
NoMachine nxservice path parsing vulnerability

Luxembourg, November 27th, 2015

NoMachine makes available updated software packages for users of version 5 to prevent a possible security problem with parsing of the string containing the path of the nxservice program on Windows. We strongly recommend users of any of the NoMachine servers for Windows to upgrade their installations to this latest release, 5.0.53. Users of version 4, please consult the combined Software Update & Security Advisory here: https://www.nomachine.com/SU12M00100.

This release, 5.0.53, also provides optimizations for multi-node environments, profiles & custom script management, and additional fixes for a number of issues affecting previous versions.

 

Optimizations implemented in this version:

FR09M02964 - Supporting SSL client authentication for connections by NX protocol
FR10M02976 - Passing further information about the connecting client to custom scripts at login stage
FR06M02939 - Letting users choose to connect to a remote node by load-balancing or manual selection
FR11M02979 - Adding the possibility to delete a specific profile rule
FR06M02938 - Enabling fingers gestures for web sessions on a mobile device
FR09L02825 - Locking down server authentication methods

 

Fixes available for the following problems:

TR09M06041 - Cannot authenticate with smart card and local SSH-authentication agent on Windows
TR07M05794 - Visual anomalies appear into window borders of virtual Xfce desktops
TR08M05944 - Cannot connect to session with domain user if network has changed
TR10M06132 - Garbled icons are shown in the Hierachy menu of a Cliosoft software
TR10M06157 - Session recording is not disabled in all cases
TR10M06098 - SSH password expiry is not correctly handled for web sessions
TR11M06180 - Cannot copy and paste from remote custom session to local system
TR11M06188 - Sudden movements of camera view when playing games
TR07M05841 - A wrong keyboard layout is set when the web session is reconnected by the client
TR11M06219 - The --limit option for the 'nxserver --nodeadd' command doesn't accept values higher than 100
TR11M06215 - Cannot connect to a NoMachine server from Windows
TR11M06190 - The "Emulate middle mouse button" option doesn't work when the virtual desktop is reconnected
TR09M06003 - Users are prompted for a passphrase even when the private key doesn't have it set
TR10M06123 - Expired password is not handled correctly when connecting by NoMachine client

 

Supported Platforms

Windows 32-bit/64-bit XP/Vista/7/8/8.1

Mac OS X Intel 64-bit 10.5/10.6/10.7/10.8/10.9/10.10

Linux 32-bit and 64-bit

Red Hat Enterprise 4/5/6/7
SLED 10.x/11.x
SLES 10/11
Open SUSE 10.x/11.x/12.x/13.x
Mandriva 2009/2010/2011
Fedora Core 10/11/12/13/14/15/16/17/18/19/20/21
Debian GNU Linux 4.0 Etch/5.0 Lenny/6.0 Squeeze/7.0 Wheezy/8.0 Jessie
Ubuntu 8.04 Hardy Heron/8.10 Intrepid Ibex/9.04 Jaunty Jackalope/
9.10 Karmic Koala/10.4 Lucid Lynx/10.10 Maverick Meerkat/11.04 Natty Narwhal/
11.10 Oneiric Ocelot/12.04 Precise Pangolin/12.10 Quantal Quetzal/13.04 Raring Ringtail/
13.10 Saucy Salamander/14.04 Trusty Tahr/14.10 Utopic Unicorn/15.04 Vivid Vervet

 

Download NoMachine Packages

You can download the latest packages suitable for your Operating System from the NoMachine Web site at the following URL:

http://www.nomachine.com/download

Customers with valid subscriptions should log in to their customer area and download the "Update version" for their "Production Version".

 

Automatic updates

The automatic check for updates will check for version 5 updates provided version 5 is installed.

To update any of the NoMachine servers immediately:

- Run the NoMachine GUI from your Programs Menu.

- Click on 'Preferences' and 'Updates'.

- Then click on the 'Check now' button.

To update the NoMachine Enterprise Client immediately:

- Click on 'Preferences' and 'Updates'.

- Then click on the 'Check now' button.

More information about the check for automatic updates is available here: https://www.nomachine.com/AR05M00847

 

Manual package update

Please follow the instructions to update your installation manually:

On Windows:

- Download and save the EXE file.
- Double click on the NoMachine executable file.
- As for the installation, the Setup Wizard will take you through all steps necessary for updating NoMachine.

On Mac OS X:

- Download and save the DMG file.
- Double-click on the Disk Image to open it and double-click on the NoMachine program icon.
- As for the installation, the Installer will take you through through all steps necessary for updating NoMachine.

On Linux:

You can use the graphical package manager provided by your Linux distribution or update NoMachine by command line by following instructions below.
If you don't have the sudo utility installed, log on as superuser ("root") and run the commands without sudo.

RPM

- Download and save the RPM file.
- Update your NoMachine installation by running:

# rpm -Uvh <pkgName>_<pkgVersion>_<arch>.rpm

DEB

- Download and save the DEB file.
- Update your NoMachine installation by running:

$ sudo dpkg -i <pkgName>_<pkgVersion>_<arch>.deb

TAR.GZ

- Download and save the TAR.GZ file.
- Update your NoMachine installation by running:

$ cd /usr
$ sudo tar xvzf <pkgName>_<pkgVersion>_<arch>.tar.gz
$ sudo /usr/NX/nxserver --update

If you are installing Enterprise Client or Node run respectively:

$ sudo /usr/NX/nxclient --update
$ sudo /usr/NX/nxnode --update

 

Documents

Installation and configuration guides for the NoMachine products are available at:

http://www.nomachine.com/documents