Release notes for xrdp v0.10.1 (2024/07/31)

General announcements

A clipboard bugfix included in this release is sponsored by Krämer Pferdesport GmbH & Co KG. We very much appreciate the sponsorship.

Please consider sponsoring or making a donation to the project if you like xrdp. We accept financial contributions via Open Collective. Direct donations to each developer via GitHub Sponsors are also welcomed.

Security fixes

• Unauthenticated RDP security scan finding / partial auth bypass (no CVE). Thanks to @txtdawg for reporting this.

New features

• GFX-RFX lossy compression levels are now selectable depending on connection type on the client (#3183, backport of [#2973])

Bug fixes

• A regression in the code for creating the chansrv FUSE directory has been fixed (#3088, backport of [#3082])
• Fix a systemd dependency ("network-online.target") (#3088, backport of [#3086])
• A problem in session list processing which could result in incorrect display assignments has been fixed (#3088, backport of [#3103])
• A problem in GFX resizing which could lead to a SEGV in xrdp has been fixed (#3088, backport of [#3107])
• A problem with the US Dvorak keyboard layout has been resolved (#3088, backport of [#3112])
• A regression bug when pasting image to LibreOffice has been fixed [Sponsored by Krämer Pferdesport GmbH & Co KG] (#3102 [#3120])
• Fix a regression when the server tries to negotiate GFX when max_bpp is not high enough (#3118 [#3122])
• Fix a GFX multi-monitor screen placing issue on minimise/maximize (#3075 [#3127])
• Fix an issue some files are not included properly in release tarball (#3149 [#3150])
• Using 'I' in the session selection policy now works correctly (#3167 [#3171])
• A potential name buffer overflow in the redirector has been fixed [no security implications] (#3175)
• Screens wider than 4096 pixels should now be supported (#3083)
• An unnecessary licensing exchange during connection setup has been removed. This was causing problems for FIPS-compliant clients (#3132 backport of [#3143])

Internal changes

• FreeBSD CI bumped to 13.3 (#3088, backport of [#3104])

Changes for users

• None since v0.10.0.
• If moving from v0.9.x, read the v0.10.0 release note.

Changes for packagers or developers

• None since v0.10.0.
• If moving from v0.9.x, read the v0.10.0 release note.