ROME, Italy, October 19, 2011 - NoMachine
releases today the third maintenance release of NX Node and NX Server.
The new versions fix a possible exploitation of the NX suid program for
executing arbitrary commands when /bin/sh is the bash shell. Among the
other issues solved by this release there are:

• Rootless sessions cannot be reconnected by NX Player 4 on NX Server 3.5.0.
   
• A shadow session cannot be started when load balancing is enabled and profiles are in use.
   
• The nxagent process crashes when trying to open a nx session within a tigervnc session.
   
• Application menus may be shown with a wrong or corrupted content.

Supported NX Node and Server platforms

Linux x86_64

• Red Hat Enterprise 4/5/6
• SLED 10.x/11.x, SLES 10/11, Open SUSE 10.x/11.x
• Mandriva 10.1/2005/2006/2007/2008/2009/2010
• Fedora Core 3/4/5/6
• Fedora 7/8/9/10/11/12/13/14/15
• Xandros Desktop 4.1/Xandros Server 2.0
• Debian GNU Linux 4.0 Etch/5.0 Lenny/ 6.0 Squeeze
• Xandros Desktop 4.1/Xandros Server 2.0
• Ubuntu
  5.10 Breezy Badger/6.06 Dapper Drake/6.10/Edgy Eft/7.04 Feisty
  Fawn/7.10 Gutsy Gibbon/8.04 Hardy Heron/8.10 Intrepid Ibex/9.04 Jaunty
  Jackalope/9.10 Karmic Koala/10.4 Lucid Lynx/10.10 Maverick Meerkat/11.04
  Natty Narwhal/11.10 Oneiric Ocelot    
   

Linux i386

• RedHat 7.2/7.3/8.0/9.0
• RedHat Enterprise Linux 3/4/5/6
• SuSE Linux 7.2/7.3/8.0/8.1/8.2/9.0, SLED 10.x/11.x, SLES 10/11, Open SUSE 10.x/11.x
• Mandriva Linux 9.0/9.1/9.2/10.0/10.1/2005/2006/2007/2008/2009/2010
• Fedora Core 1/2/3/4/5/6
• Fedora 7/8/9/10/11/12/13/14/15
• Debian GNU Linux 3.0 Woody/3.1 Sarge/4.0 Etch/5.0 Lenny/ 6.0 Squeeze
• Xandros 3.0/Xandros Desktop 4.1/Xandros Server 2.0
• Ubuntu
  5.04 Hoary Hedgehog/5.10 Breezy Badger/6.06 Dapper Drake/6.10/Edgy
  Eft/7.04 Feisty Fawn/7.10 Gutsy Gibbon/8.04 Hardy Heron/8.10 Intrepid
  Ibex/9.04 Jaunty Jackalope/9.10 Karmic Koala/10.4 Lucid Lynx/10.10
  Maverick Meerkat/11.04 Natty Narwhal/11.10 Oneiric Ocelot

Trouble Reports solved

NX Core  

TR10H02390 - Alt and CapsLock keys could behave unexpectedly with NX Client for Mac OS X

TR10I02620 - The nxagent process crashes when trying to open a nx session within a tigervnc session

TR10I02621 -  Application menus may be shown with a wrong or corrupted content

TR10I02622 - The nxagent process could fail to create an icon

NX Node

TR10I02625 -  The NX suid wrapper program could be used locally to run arbitrary commands

NX Server

TR09I02607 - A shadow session cannot be started when load balancing is enabled and profiles are in use

TR10I02616 - Rootless sessions cannot be reconnected by NX Player 4 on NX Server 3.5.0

TR10I02619 - NX Server message reporting that there are not enough resources to start a session contains a typo

Download the NX Node and Server packages

http://www.nomachine.com/download/

Update

Instructions for Linux are intended to be run from command line
and use the sudo utility. If you don't have the sudo utility
installed, log on as superuser ('root') and run the commands without
sudo. Otherwise you can use the graphical package manager provided by
your Linux distribution. Instructions for RPM , DEB and tar.gz packages
refer to the 32 bit package (i386) and can be easily extended to the
64bit package (x86_64 or amd64).

It is highly
recommended you disable access to new NX sessions and terminate all
running sessions before proceeding with the update of node and server.
To disable access to new NX sessions and terminate all the running
sessions, open an xterm or similar and run the following commands:

$ sudo /usr/NX/bin/nxserver --stop
$ sudo /usr/NX/bin/nxserver --shutdown

After the update procedure is completed, restart NX server by running:

$ sudo /usr/NX/bin/nxserver --start

RPM version for Linux

• Download the RPMs
• Change your working directory to the location where you saved the packages
  and update the node and server installation by running from a console:
  $ sudo rpm -Uvh nxnode-3.5.0-xy.i386.rpm
  $ sudo rpm -Uvh nxserver-3.5.0-xy.i386.rpm
   

DEB version for Linux

• Download the DEBs
• Change your working directory to the location where you saved the packages
  and update the node and server installation by running from a console:
  $ sudo dpkg -i nxnode_3.5.0-xy_i386.deb
  $ sudo dpkg -i nxserver_3.5.0-xy_i386.deb
   

TAR.GZ version for Linux

• Download the TAR.GZs in the /usr directory
• Change your working directory to the /usr directory, and uncompress
  the packages by running from a console:
  $ cd /usr
  $ sudo tar zxvf nxnode-3.5.0-xy.i386.tar.gz
  $ sudo tar zxvf nxserver-3.5.0-xy.i386.tar.gz
• Run the setup scripts for updating the NX Node and Server software:
  $ sudo /usr/NX/bin/nxnode --update
  $ sudo /usr/NX/bin/nxserver --update
   

SPARC.GZ version for Solaris

• Download the SPARC.GZs
• Change your working directory to the location where you saved the packages,
  uninstall the previous versions of the software and install the new packages
  by running from a console:
  # pkgrm NXserver
  # pkgrm NXnode
  # gunzip nxnode-3.5.0-xy.sparc.gz
  # gunzip nxserver-3.5.0-xy.sparc.gz
  # pkgadd -d nxnode-3.5.0-xy.sparc
  # pkgadd -d nxserver-3.5.0-xy.sparc

The complete set of installation instructions is available at:

http://www.nomachine.com/installation.php

You can find here more detailed instructions on how to configure and administer NX Node and NX Server:

http://www.nomachine.com/documents/admin-guide.php
 

NoMachine NX OSS components

Together with the commercial NX products, this new maintenance release sports updates to the following OSS components:

nxagent-3.5.0-7
nxuexec-3.5.0-3

The following components were not updated since the previous 3.5.0 releases:

nx-X11-3.5.0-2
nxcomp-3.5.0-2
nxcompext-3.5.0-1
nxcompshad-3.5.0-2
nxspool-3.5.0-1
nxsensor-3.5.0-1

Sources of all the OSS NX components can be downloaded here:

http://www.nomachine.com/sources/

Please refer to the ChangeLog of each specific package for more
information about all changes introduced since the previous 3.5.0
versions.

The NX Development Team