Luxembourg, March 30th, 2021 - NoMachine makes available updates to NoMachine version 7 to fix issues affecting earlier versions and to align the OpenSSL libraries to the latest OpenSSL release which was recently published.

We would like to reassure our users about OpenSSL version 1.1.1k in which maintainers disclosed and patched a null pointer dereference bug that causes servers to crash when they receive a maliciously crafted request from an unauthenticated end user. Although NoMachine software is not susceptible to this flaw (CVE-2021-3449), we made the decision to upgrade due to other issues disclosed, issues also marked as serious by OpenSSL, albeit not critical, and that were in any case not exploitable using the default configuration of the NX server. Furthermore, we decided, with this update, to bring the OpenSSL version we use up to par with the latest stable OpenSSL release, to make it easier and more straightforward to bring you security updates in the future.

Details about the OpenSSL 1.1.1k update are here:

https://www.openssl.org/news/secadv/20210325.txt

All NoMachine 7 customers are invited to update their NoMachine client and server installations to this latest release, 7.4.1. Customers using version 6 should read the announcement here:

https://www.nomachine.com/SU03S00222

This release implements the following:

FR03S04122 - Updating the OpenSSL libraries provided by NoMachine to v. 1.1.1k

TR03S10165 - Keys to pre-define session resolution are ineffective
TR03S10156 - The procedure to collect logs automatically doesn't gather logs from the user's home on the nodes

Supported Platforms

Windows 32-bit/64-bit XP/Vista/7/8/8.1/10

Windows Server 2008/2012/2016/2019

Mac OS X Intel 64-bit 10.7 to 10.11/macOS Intel 10.12 to 11.x

Linux 32-bit and 64-bit

RHEL 4 to RHEL 8
SLED 10 to SLED 15
SLES 10 to SLES 15
openSUSE 10.x to openSUSE 15.x
Mandriva 2009 to Mandriva 2011
Fedora 10 to Fedora 33
Debian 4.0 to Debian 10
Ubuntu 8.04 to Ubuntu 20.10

Raspberry Pi 2/3/4 ARMv6/ARMv7/ARMv8

Download NoMachine Packages

You can download the latest packages suitable for your Operating System from the NoMachine Web site at the following URL:

https://www.nomachine.com/download

Customers with valid subscriptions should log in to their customer area and download the "Production version".

Automatic updates

The automatic check for updates is scheduled to check our repositories every two days.

To update the free NoMachine package:

• - Open the NoMachine User Interface from your Programs Menu.
• - From the Machines panel click on 'Settings', then on 'Server' and finally on 'Updates'.
• - Then click on the 'Check now' button.

To update the NoMachine Enterprise Client immediately:

• - Click on 'Settings', from the Player panel click 'Updates'.
• - Then click on the 'Check now' button.

More information about the check for automatic updates is available here:

https://www.nomachine.com/AR05M00847

Manual package update

Please follow the instructions to update your installation manually:

On Windows:

• - Download and save the EXE file.
• - Double click on the NoMachine executable file.
• - As for the installation, the Setup Wizard will take you through all steps necessary for updating NoMachine.

On macOS:

• - Download and save the DMG file.
• - Double-click on the Disk Image to open it and double-click on the NoMachine program icon.
• - As for the installation, the Installer will take you through through all steps necessary for updating NoMachine.

On Linux:

You can use the graphical package manager provided by your Linux distribution or update NoMachine by command line by following instructions below. If you don't have the sudo utility installed, log on as superuser ("root") and run the commands without sudo.

RPM

• - Download and save the RPM file.
• - Update your NoMachine installation by running:

• • # rpm -Uvh <pkgName>_<pkgVersion>_<arch>.rpm

DEB

• - Download and save the DEB file.
• - Update your NoMachine installation by running:

• • $ sudo dpkg -i <pkgName>_<pkgVersion>_<arch>.deb

TAR.GZ

• - Download and save the TAR.GZ file.
• - Update your NoMachine installation by running:

• • $ cd /usr
  • $ sudo tar xvzf <pkgName>_<pkgVersion>_<arch>.tar.gz
  • $ sudo /usr/NX/nxserver --update

• If you are installing Enterprise Client or Node run respectively:

• • $ sudo /usr/NX/nxclient --update
  • $ sudo /usr/NX/nxnode --update

Documents

Installation and configuration guides for the NoMachine products are available at:

https://www.nomachine.com/all-documents

The NoMachine Development Team