Luxembourg, July 16th, 2024

NoMachine makes available new packages for version 7 which ship OpenSSL libraries v3.0 to replace OpenSSL version 1.1.1w. The nxssh and nxsshd components for Windows still use OpenSSL version 1.1.1w, patched with security fixes imported from OpenSSL libraries v3.0. Due to this change, when updating multi-node environments it's necessary to upgrade first the nodes and then the server to ensure communications between them (see: https://kb.nomachine.com/AR07V01242).

Additionally, the NoMachine built-in web server, nxhtd, has been updated to Apache version 2.4.60 in order to fix the following CVEs which could potentially affect it:

From Apache version 2.4.61:

CVE-2024-39884, Apache HTTP Server: source code disclosure with handlers configured via AddType

From Apache version 2.4.60:

CVE-2024-38472, Apache HTTP Server on WIndows UNC SSRF
CVE-2024-38474, Apache HTTP Server weakness with encoded question marks in backreferences
CVE-2024-38475, Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path
CVE-2024-38476, Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

From Apache version 2.4.59:

CVE-2023-38709, HTTP response splitting
CVE-2024-24795, HTTP Response Splitting in multiple modules.

Details of these security fixes are available at https://downloads.apache.org/httpd/CHANGES_2.4.

The trouble report solved by this 7.15.5 release is:

TR01V11068 - Network disks are displayed as available to connect when the session is started from a Windows client

Supported Platforms

Windows 32-bit/64-bit Vista/7/8/8.1/10/11
Windows Server 2008/2012/2016/2019/2022

Mac OS X Intel 64-bit 10.9 to 10.11/macOS Intel 10.12 to 13/macOS Apple Silicon 11/12/13

Linux 32-bit and 64-bit
RHEL 6.0 to RHEL 9
CentOS 6.0 to CentOS 8.5
SLED 11 to SLED 15
SLES 11 to SLES 15
openSUSE 11.x to openSUSE 15.x
Fedora 10 to Fedora 40
Debian 5 to Debian 12
Ubuntu 8.04 to Ubuntu 24.04

Raspberry Pi 2/3/4 ARMv6/ARMv7/ARMv8

Download NoMachine Packages

Customers with valid v7 subscriptions should log in to their customer area and download the appropriate server package(s) for their subscription(s) from the 'Product Downloads' section.

Automatic updates

The automatic check for updates is scheduled to check our repositories every two days.

To update the free NoMachine package:

- Open the NoMachine User Interface from your Programs Menu.
- From the Machines panel click on 'Settings', then on 'Server' and finally on 'Updates'.
- Then click on the 'Check now' button.

To update the NoMachine Enterprise Client immediately:

- Click on 'Settings', from the Player panel click 'Updates'.
- Then click on the 'Check now' button.

More information about the check for automatic updates is available here:

https://www.nomachine.com/AR05M00847

Manual package installation or update

Please follow the instructions to install the package or update your installation manually:

On Windows:

- Download and save the EXE file.
- Double click on the NoMachine executable file.
- The Setup Wizard will take you through all steps necessary for installing or updating NoMachine.

On macOS:

- Download and save the DMG file.
- Double-click on the Disk Image to open it and double-click on the NoMachine program icon.
- The Installer will take you through through all steps necessary for installing or updating NoMachine.

On Linux:

You can use the graphical package manager provided by your Linux distribution or update NoMachine by command line by following instructions below. If you don't have the sudo utility installed, log on as superuser ("root") and run the commands without sudo.

RPM

- Download and save the RPM file.
- Install the package by running:
# rpm -ivh  <pkgName>_<pkgVersion>_<arch>.rpm
or
- Update your NoMachine installation by running:
# rpm -Uvh  <pkgName>_<pkgVersion>_<arch>.rpm

DEB

- Download and save the DEB file.
- Install the package by running:
$ sudo dpkg -i <pkgName>_<pkgVersion>_<arch>.deb
or
- Update your NoMachine installation by running:
$ sudo dpkg -i <pkgName>_<pkgVersion>_<arch>.deb

TAR.GZ

- Download and save the TAR.GZ file.
- Install the package by running:
$ cd /usr
$ sudo tar xvzf <pkgName>_<pkgVersion>_<arch>.tar.gz
$ sudo /usr/NX/nxserver --install
or
- Update your NoMachine installation by running:
$ cd /usr
$ sudo tar xvzf <pkgName>_<pkgVersion>_<arch>.tar.gz
$ sudo /usr/NX/nxserver --update
If you are installing Enterprise Client or Node run respectively:
$ sudo /usr/NX/nxclient --update
$ sudo /usr/NX/nxnode --update

Documents

Installation and configuration guides for the NoMachine products are available at:

https://www.nomachine.com/all-documents

The NoMachine Development Team