2012-12-17 David King Update NEWS for 3.7.3 release 2012-12-17 Huzaifa Sidhpurwala Do not leak clipboard to unauthenticated clients vino_server_clipboard_cb() in vino-server.c is the callback which is triggered when a clipboard copy event is fired. After doing some initial checks, (1. If there are any connected clients, 2. If the server is on hold etc), it converts the text to UTF-8 and then passes it on to rfbSendServerCutText(). Here data is pasted to each client, without verifying if the client is authenticated. The patch checks if the client is authenticated and only then it allows the clipboard text to be sent to it. Fixes bug 678434. This is a security issue, and has been assigned CVE-2012-4429: http://www.openwall.com/lists/oss-security/2012/09/14/1 2012-12-16 Fran DiƩguez Updated Galician translations 2012-12-02 Dr.T.Vasudevan Updated Tamil translation 2012-11-23 Nilamdyuti Goswami Assamese translation updated 2012-11-22 ManojKumar Giri Updated Odia Translation with FUEL implementation. 2012-11-12 ozu17928 Set quality level if JPEG support is enabled Fixes bug 683793. 2012-11-10 Ryan Lortie server/miniupnp/: -Wmissing-prototypes fixups