xrdp v0.10.1

[metalefty]

Release notes for xrdp v0.10.1 (2024/07/31)

General announcements

A clipboard bugfix included in this release is sponsored by Krämer Pferdesport GmbH & Co KG. We very much appreciate the sponsorship.

Please consider sponsoring or making a donation to the project if you like xrdp. We accept financial contributions via Open Collective. Direct donations to each developer via GitHub Sponsors are also welcomed.

Security fixes

• Unauthenticated RDP security scan finding / partial auth bypass (no CVE). Thanks to @txtdawg for reporting this.

New features

• GFX-RFX lossy compression levels are now selectable depending on connection type on the client ([v0.10] cherry-picks #3183, backport of GFX: selectable lossy compression levels #2973)

Bug fixes

• A regression in the code for creating the chansrv FUSE directory has been fixed (Further cherry-picks for v0.10 #3088, backport of chansrv FUSE fixes #3082)
• Fix a systemd dependency ("network-online.target") (Further cherry-picks for v0.10 #3088, backport of Fix a systemd dependency ("network-online.target") #3086)
• A problem in session list processing which could result in incorrect display assignments has been fixed (Further cherry-picks for v0.10 #3088, backport of Fix session list processing #3103)
• A problem in GFX resizing which could lead to a SEGV in xrdp has been fixed (Further cherry-picks for v0.10 #3088, backport of Fix resize crash #3107)
• A problem with the US Dvorak keyboard layout has been resolved (Further cherry-picks for v0.10 #3088, backport of Replace 'dvorak' keyboard description with 'us(dvorak)' #3112)
• A regression bug when pasting image to LibreOffice has been fixed [Sponsored by Krämer Pferdesport GmbH & Co KG] (Clipboard not working for images #3102 clipboard: fix a bug when pasting image to LibreOffice #3120)
• Fix a regression when the server tries to negotiate GFX when max_bpp is not high enough (v0.10.0 + decreased max_bpp causes protocol error #3118 [v0.10] Don't use GFX if server max_bpp is <32 #3122)
• Fix a GFX multi-monitor screen placing issue on minimise/maximize (xrdp v0.10 incorrect behavior when minimizing and restoring a mstsc.exe connection in fullscreen with multiple monitors (v0.9 works fine) #3075 [v0.10] Fix min/max monitor placing issue #3127)
• Fix an issue some files are not included properly in release tarball (xrdp-0.10.0.tar.gz does not include 'docs/man/xrdp-mkfv1.8.in'. #3149 docs: always include docs/man/xrdp-mkfv1.8.in to dist tarball #3150)
• Using 'I' in the session selection policy now works correctly (Session Allocation Policy 'I' not working (client IP address is always NULL) #3167 [V0.10] sesman: Copy IP address to pre_session_item struct #3171)
• A potential name buffer overflow in the redirector has been fixed [no security implications] ([V0.10] Fix potential name buffer overflows in redirector #3175)
• Screens wider than 4096 pixels should now be supported (GFX: graphic glitches when a monitor is more than 4096 pixels wide or high #3083)
• An unnecessary licensing exchange during connection setup has been removed. This was causing problems for FIPS-compliant clients (xrdp is using RDP licensing #3132 backport of Remove Licensing exchange #3143)

Internal changes

• FreeBSD CI bumped to 13.3 (Further cherry-picks for v0.10 #3088, backport of Bump FreeBSD CI version to 13.3 #3104)

Changes for users

• None since v0.10.0.
• If moving from v0.9.x, read the v0.10.0 release note.

Changes for packagers or developers

• None since v0.10.0.
• If moving from v0.9.x, read the v0.10.0 release note.

---

This discussion was created from the release xrdp v0.10.1.