# Release notes for xrdp v0.9.8 (2018/09/25) ## Deprecation notice We removed TLSv1 and TLSv1.1 from the default config. The current default is TLSv1.2 and TLSv1.3. Users can whenever re-enable these early TLS versions by editing xrdp. To use TLSv1.3, OpenSSL or LibreSSL must support TLSv1.3. You can know the OpenSSL or LibreSSL version by `xrdp --version` command that compiled with xrdp. ## Other topics Pulseaudio modules has been removed from xrdp source tree since it is actually independent and not part of xrdp. The repository has been moved to: https://github.com/neutrinolabs/pulseaudio-module-xrdp If you want to use audio redirection, make sure install the module separately. ## New features * Add TLSv1.3 support #1193 ## Bug fixes * Ensure unmount redirected drive on fatal X error #1140 ## Other changes * Show more helpful message if xrdp-dis failed #1206 * Pass pulse socket name via environment variable #1198 * Fix xrdp's log path in man page #1168 # Release notes for xrdp v0.9.7 (2018/06/29) ## Deprecation notice x11rdp has been removed from xrdp reposiory and stored in the separate repository. Checkout [x11rdp repository](https://github.com/neutrionlabs/x11rdp) if you still need x11rdp. In most cases, [xorgxrdp](https://github.com/neutrinolabs/xorgxrdp) can replace x11rdp. ## Bug fixes * Fix endianness detection on ppc64el #1082 * Fix a bug xrdp file copy slow #1112 #1132 * Copy the PAM session environment for the reconnect script #1120 * Accept fullpath for DefaultWindowManager, ReconnectScript #1147 ## Other changes * Add PAM support for Arch Linux #1078 * Show OpenSSL version to '--version' CLI option #1096 * Separate x11rdp from xrdp repository #1104 * Support sesrun start xorgxrdp sessions #1108 * Show configure summary when configure is done #1126 #1134 #1137 * Less spit on the console when sesman starts #1142 * Fix memory leaks #1146 * Separate rc script for FreeBSD into xrdp and xrdp-sesman #1153 * Improve documents and helps ## Known issues * Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965 ----------------------- # Release notes for xrdp v0.9.6 (2018/03/26) ## Compatibility notice Exclamation mark (`!`) has been removed from comment out symbol of config files. Use number sign (`#`) or semicolon (`;`) instead. As a result of this change, now you can use exclamation mark as config value such as in `tls_ciphers`. ``` tls_ciphers=HIGH:!aNULL:!eNULL:!EXPORT:!RC4 ``` See also: #1033 ## macOS supports Please note that xrdp still doesn't support macOS officially so far. However, a volunteer is working on macOS compatibility. * Generate dylibs for macOS #1015 * Add PAM support for macOS #1021 ## Bug fixes * Make listen check before daemon fork #988 * Fix xrdp sometimes become zombie processes #1000 * Include hostname in sesman password file name #1006 #1007 #1076 * Fix default startwm.sh to use bash explicitly #1009 #1049 * Fix the issue FreeBSD doesn't acknowledge terminated sessions #1016 #1030 ## Other changes * Add Swiss French keyboard #1053 * Improve perfect forward secrecy, explicitly enable ECDHE/DHE #1024 #1052 #1063 * Lots of leak fixes, cleanups and refactoring ## Known issues * Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965 ----------------------- # Release notes for xrdp v0.9.5 (2017/12/27) ## Security fixes * Fix local denial of service [CVE-2017-16927](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16927) #958 #979 ## New features * Add a new log level TRACE more verbose than DEBUG #835 #944 * SSH agent forwarding via RDP #867 #868 FreeRDP/FreeRDP#4122 * Support horizontal wheel properly #928 ## Bug fixes * Avoid use of hard-coded sesman port #895 * Workaround for corrupted display with Windows Server 2008 using NeutrinoRDP #869 * Fix glitch in audio redirection by AAC #910 #936 * Implement vsock support #930 #935 #948 * Avoid 100% CPU usage on SSL accept #956 ## Other changes * Add US Dvorak keyboard #929 * Suppress some misleading logs #964 * Add Finnish keyboard #972 * Add more user-friendlier description about Xorg config #974 * Renew pulseaudio document #984 #985 * Lots of cleanups and refactoring ## Known issues * Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965 ----------------------- # Release notes for xrdp v0.9.4 (2017/09/28) ## New features * Accept prefill credentials in base64 form #153 #811 * Indroduce AAC encoder to audio redirection (requires Windows 10 client) ## Bugfixes * Fix ocasional SEGV in drive redirection #838 * Fix client's IP addresses in xrdp-sesman.log are always logged as `0.0.0.0` #878 #882 * Fix `ls_background_image` didn't accept full path #776 #853 * Fix misuse of hidelogwindow #414 #876 * Fix WTSVirtualChannelWrite return code #859 * Fix no longer needed socket files remained in the socket dir #812 #831 * Make creating socket path a bit more robust #823 ## Other changes * Add Belgian keyboard #858 * Add a PAM file for FreeBSD #824 * Several refactorings and cosmetic changes ## Known issues * Windows 10 (1703) shows black blank screen in RemoteFX mode * This issue is already fixed at Insider Preview build 16273 ----------------------- # Release notes for xrdp v0.9.3.1 (2017/08/16) This release fixes a trivial packaging issue #848 occurred in v0.9.3. The issue only affects systemd systems. This release is principally for distro packagers or users who compile & install xrdp from source. Users who running xrdp on these systems don't need to upgrade from v0.9.3 to v0.9.3.1. * Linux systems without systemd * non-Linux systems such as BSD operating systems ----------------------- # Release notes for xrdp v0.9.3 (2017/07/15) ## New features * Log user-friendly messages when certificate/privkey is inaccessible ## Bugfixes * Now sesman sets mandatory LOGNAME environment variable #725 * Now sesman ensures socket directory present #801 * Exit with failure status if port already in use #644 * Eliminate some hard coded paths * Fix glitches with IPv4 struct initialization #803 * Fix some keyboard layout integration (UK, Spanish) * Fix handle OS when IPv6 disabled #714 * Fix issues around systemd session #778 * Fix protocol error when 32 bit color and non RemoteFX session #737 #804 * Fix sesadmin shows error when no sessions #797 * Fix TLS spins 100% CPU #728 * Fix Xvnc backend disconnects when some data copied to clipboard #755 * Pick up the first section if given section(domain) doesn't match anything #750 ## Other changes * Change xrdp-chansrv log path to include display number * Optimize startwm.sh for SUSE * Several cleanups and optimizations ## Known issues * Windows 10 (1703) shows black blank screen in RemoteFX mode ----------------------- # Release notes for xrdp v0.9.2 (2017/03/30) ## New features * RemoteFX codec support is now enabled by default. * Bitmap updates support is now enabled by default. * TLS ciphers suites and version is now logged. * Connected computer name is now logged. * Switched to Xorg (xorgxrdp) as the default backend now. * Miscellaneous RemoteFX codec mode improvements. * Socket directory is configurable at the compile time. ## Bugfixes * Parallels client for MacOS / iOS can now connect (audio redirection must be disabled on client or xrdp server though). * MS RDP client for iOS can now connect using TLS security layer. * MS RDP client for Android can now connect to xrdp. * Large resolutions (4K) can be used with RemoteFX graphics. * Multiple RemoteApps can be opened throguh NeutrinoRDP proxy. * tls_ciphers in xrdp.ini is not limited to 63 chars anymore, it's variable-length. * Fixed an issue where tls_ciphers were ignored and rdp security layer could be used instead. * Kill disconnected sessions feature is working with Xorg (xorgxrdp) backend. * Miscellaneous code cleanup and memory issues fixes. ----------------------- # Release notes for xrdp v0.9.1 (2016/12/21) ## New features * New xorgxrdp backend using existing Xorg with additional modules * Improvements to X11rdp backend * Support for IPv6 (disabled by default) * Initial support for RemoteFX Codec (disabled by default) * Support for TLS security layer (preferred over RDP layer if supported by the client) * Support for disabling deprecated SSLv3 protocol and for selecting custom cipher suites in xrdp.ini * Support for bidirectional fastpath (enabled in both directions by default) * Support clients that don't support drawing orders, such as MS RDP client for Android, ChromeRDP (disabled by default) * More configurable login screen * Support for new virtual channels: * rdpdr: device redirection * rdpsnd: audio output * cliprdr: clipboard * xrdpvr: xrdp video redirection channel (can be used along with NeutrinoRDP client) * Support for disabling virtual channels globally or by session type * Allow to specify the path for backends (Xorg, X11rdp, Xvnc) * Added files for systemd support * Multi-monitor support * xrdp-chansrv stroes logs in `${XDG_DATA_HOME}/xrdp` now ## Security fixes * User's password could be recovered from the Xvnc password file * X11 authentication was not used