- xrdp-CVE-2022-23477.patch (bsc#1206301)
+ Buffer over flow in audin_send_open() function
- Security fixes:
+ xrdp-CVE-2022-23468.patch (bsc#1206300)
* Buffer overflow in xrdp_login_wnd_create()
+ xrdp-CVE-2022-23478.patch (bsc#1206302)
* Out of Bound Write in xrdp_mm_trans_process_drdynvc_chan
+ xrdp-CVE-2022-23479.patch (bsc#1206303)
* Buffer overflow in xrdp_mm_chan_data_in() function
+ xrdp-CVE-2022-23480.patch (bsc#1206306)
* Buffer overflow in devredir_proc_client_devlist_announce_req
+ xrdp-CVE-2022-23481.patch (bsc#1206307)
* Out of Bound Read in xrdp_caps_process_confirm_active()
+ xrdp-CVE-2022-23482.patch (bsc#1206310)
+ Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE()
+ xrdp-CVE-2022-23483.patch (bsc#1206311)
+ Out of Bound REad in libxrdp_send_to_channel()
+ xrdp-CVE-2022-23484.patch (bsc#1206312)
+ Integer Overflow in xrdp_mm_process_rail_update_window_text()
+ xrdp-CVE-2022-23493.patch (bsc#1206313)
+ Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close()
OBS-URL: https://build.opensuse.org/request/show/1057176
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=106
- Update to version 0.9.19
+ New features
- loongarch support
- Improved Fail2ban support
- Both inbound and outbound clipboards can now be restricted for text,
files or images
- Versions 0.13 and later of checklib can undefine the pre-processor
symbol HAVE_STDINT_H
- The OpenSSL 3 EVP interface is now fully supported
- The logging of TLS/non-TLS security negotiation has been improved
- Unified and improved logging
- Status values for the DRDYNVC channel are now available in
libxrdp/xrdp_channel.h
- Backgrounds and logos on the login screen can now be zoomed and scaled
- The performance settings for NeutrinoRDP can be now configured
- clipboard: log file transfer for the purpose of audit
- Client's Keyboard layout now can be overridden by xrdp configuration
for debugging purposes
- On-the-fly resolution change now supported for Xvnc and Xorg
- xrdp can now use key algorithms other than RSA for TLS
- chansrv can now work on DISPLAY=:0 so it can be used with
x11vnc/Vino/etc sessions
+ Bug fixes
- Privilege escalation on xrdp-sesman: CVE-2022-23613
- Some situations where zombie processes could exist have been resolved
- Null-pointer exceptions which can happen in the logging module addressed
- Some minor logging errors have been corrected
- The signal handling in sesman has been reworked to prevent race conditions
when a child exits
- Logging is improved for security protocol level decisions
- Failure to attach to the memory area shared with xorgxrdp now logged
- Remote drive redirection now works if printer redirection is also
requested by the client
- config value has been added which allows copy-pasting of files to work
with Nautilus for GNOME 3 versions >= 3.29.92
- Fix some regressions in sesman auth modules
- Fix TS_PLAY_SOUND_PDU_DATA to set the correct frequency and duration
- Fix password leakage to logs in NeutrinoRDP module
- Remove *.txt as docs because of files not found (improvements in man pages)
OBS-URL: https://build.opensuse.org/request/show/978632
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=98
- Rework files section: do not add config(noreplace) marker on the
directory /etc/xrdp, but only on the content of the directory.
+ the config(noreplace) marker on the dircreates a rpm metadata
marker, which can be identified as conflicting with other
packages also owning /etc/xrdp, without the marker
+ The re-org of the files section happens to also fix warnings
about files listed twice.
The old buildlog contained entries like
```
[ 124s] warning: File listed twice: /etc/xrdp
[ 124s] warning: File listed twice: /etc/xrdp/km-00000406.ini
[ 124s] warning: File listed twice: /etc/xrdp/km-00000407.ini
[ 124s] warning: File listed twice: /etc/xrdp/km-00000409.ini
[ 124s] warning: File listed twice: /etc/xrdp/km-0000040a.ini
[ 124s] warning: File listed twice: /etc/xrdp/km-0000040b.ini
[ 124s] warning: File listed twice: /etc/xrdp/km-0000040c.ini
[ 124s] warning: File listed twice: /etc/xrdp/km-00000410.ini
[ 124s] warning: File listed twice: /etc/xrdp/km-00000411.ini
```
OBS-URL: https://build.opensuse.org/request/show/951614
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=95
- Update to version 0.9.15
+ New features
- Allow token sign in without autologon for SSO (#1667#1668)
- Norwegian keyboard support (#1675)
- Improved config support for chansrv (#1635)
- Unified chansrv, sesman and libxrdp logging (#1633#1708#1738)
- Support SUSE move to /usr/etc (#1702)
- Parameters may now be specified for user-specified shell
(#1270#1695)
- xrdp executables now allow alternative config files to be
specified with -c (#1588#1650#1651)
- sesrun improvements (#1741)
- Drive redirection location can now be specified (#1048)
+ Bug fixes
- Additional buffer overflow checks (#1662)
- genkeymap array size conflict fixed (#1691)
- Buffering issue with neutrinordp over a slow link fixed
(#1608 1634)
- Prevent PAM info message from causing authentication failure
(#1727)
- Try harder to clean up socket files on session exit (#1740#1756)
- xrdp-chansrv become defunct in docker while file copy (#1658)
- Drop xrdp-buildfix.patch: fixed upstream
- Drop xrdp-default-config.patch. Add patched sources xrdp.ini and
sesman.ini to avoid frequent rebases
- Drop xrdp-usr-etc-support.patch: fixed upstream
- Rebase xrdp-avahi.diff
- Rebase xrdp-fate318398-change-expired-password.patch
OBS-URL: https://build.opensuse.org/request/show/860663
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=92
- Update to version 0.9.14
+ New features
- Multi monitor and resize support for Xvnc backend #1343
For more details see
https://github.com/neutrinolabs/xrdp/wiki/Xvnc-backend-:-Multi-monitor-and-resize-support
- Support Programmer Dvorak Keyboard #1663
+ Bug fixes
- Fix odd shift key behavior (workaround) #397#1522
- Fix internal username/password buffer is smaller than RDP
protocol specification #1648#1653
- Fix possible memory out-of-bounds accesses #1549
- Fix memory allocation overflow #1557
- Prevent chansrv input channels being scanned during a server
reset #1595
- Ignore TS_MULTIFRAGMENTUPDATE_CAPABILITYSET from client if fp
disabled #1593
+ Known issues
- FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp
due to xrdp's bad-mannered behaviour, add +glyph-cache option
to FreeRDP to connect #1266
- Audio redirection by MP3 codec doesn't sound with some
client, use AAC instead #965
- Drop xrdp-fate319683-allow-vnc-resizing.patch: fixed upstream
- Rebase xrdp-default-config.patch
- Rebase xrdp-disable-8-bpp-vnc-support.patch
- Rebase xrdp-fate318398-change-expired-password.patch
OBS-URL: https://build.opensuse.org/request/show/834273
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=87
- Update to version 0.9.13
+ Bug fixes: some regressions on drive redirection #1469#1487#1505#1507
+ Support mousex button 8/9 #1478
- Update to version 0.9.12
+ Bug fixes
- Fix "The log reference is NULL" error when sesman startup
#1425
- Fix behavior when shmem_id changes #1439
- Make vsock config accept -1 for cid and port #1441
- Cleanup refresh rect and check stream bounds #1437
- Significant improvements in drive redirection #1449
+ Other changes
- Proprietary microphone redirection via rdpsnd is now default
off RDP compatible microphone redirection is on instead #1427
- Skip connecting to chansrv when no channels enabled #1393
- Add openSUSE's pam rules (boo#1156094, #1442)
- Do not terminate xrdp daemon when caught SIGHUP #1319
- Known issues
+ FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp
due to xrdp's bad-mannered behaviour, add `+glyph-cache` option
to FreeRDP to connect #1266
+ Audio redirection by MP3 codec doesn't sound with some client,
use AAC instead #965
- Drop xrdp-mkpamrules-support-usr-etc-distconfdir.patch: Fixed
upstream
OBS-URL: https://build.opensuse.org/request/show/784202
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=76
- Update to version 0.9.11 (jsc#9612)
+ New features
- Suppress output (do not draw screen when client window is
minimized) #1330
- Audio input (microphone) redirection compatible with
MS-RDPEAI #1369
- Now xrdp can listen on more than one port #1124#1366
+ Bug fixes
- Fix the issue audio redirection sometimes sounds with long
delay #1363
- Check term event for more responsive shutdown #1372
+ Known issues
- FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp
due to xrdp's bad-mannered behaviour, add +glyph-cache option
to FreeRDP to connect #1266
- Audio redirection by MP3 codec doesn't sound with some
client, use AAC instead #965
- Rebase xrdp-avahi.diff, worked around stdint.h definitions
- Rebase xrdp-fate319683-allow-vnc-resizing.patch
OBS-URL: https://build.opensuse.org/request/show/737648
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=64
- Update to version 0.9.10
+ New features
- Restrict outbound (server->client) clipboard transfer,
configured in `sesman.ini` #1298
+ Bug fixes
- Fix libscp v1 not setting width but height twice #1293
- Fix reconnecting to session causes duplicate drive entries
in fuse fs #1299
- Fix default_wm and reconnect_sh refer wrong path after sesman
caught SIGUP #1315#1331
- Shutdown xrdp more responsively #1325
- Improve remote file lookup in drive redirection #996#1327
- Overwriting & appending to existing files now supported #1327
+ Other changes
- Add Danish Keyboard #1290
- Put xrdp- prefix to some executables appear in man page #1313
- Replace some URLs from SF.net to xrdp.org #1313
+ Known issues
- FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp
due to xrdp's bad-mannered behaviour, add `+glyph-cache`
option to FreeRDP to connect #1266
- Audio redirection by MP3 codec doesn't sound with some
client, use AAC instead #965
OBS-URL: https://build.opensuse.org/request/show/699476
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=52
- Update to version 0.9.9
+ New features
- Disconnection by idle timeout (requires xorgxrdp v0.2.9 or
later) #1227
+ Bug fixes
- Fix xrdp-chansrv crashes caused in drive redirection #1202#1225
- Fix build with FDK AAC v2 #1257
- Do not enable RemoteApp if the INFO_RAIL flag is not set
(RDP-RDP proxy) #1253
+ Other changes
- Add Spanish Latin Amarican keyboard #1237#1240#1244
- Dynamic channel improvements #1222#1224
- Remove some deprecated sesman session types #1232
- Refactoring and cleanups
+ Known issues
- FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp
due to xrdp's bad-mannered behaviour, add `+glyph-cache`
option to FreeRDP to connect #1266
- Audio redirection by MP3 codec doesn't sound with some
client, use AAC instead #965
+ Refresh xrdp-default-config.patch
OBS-URL: https://build.opensuse.org/request/show/661643
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=50
- Update to version 0.9.5
+ Security fixes
- Fix local denial of service (CVE-2017-16927) #958#979
+ New features
- Add a new log level TRACE more verbose than DEBUG #835#944
- SSH agent forwarding via RDP #867#868FreeRDP/FreeRDP#4122
- Support horizontal wheel properly #928
+ Bug fixes
- Avoid use of hard-coded sesman port #895
- Workaround for corrupted display with Windows Server 2008
using NeutrinoRDP #869
- Fix glitch in audio redirection by AAC #910#936
- Implement vsock support #930#935#948
- Avoid 100% CPU usage on SSL accept #956
+ Other changes
- Add US Dvorak keyboard #929
- Suppress some misleading logs #964
- Add Finnish keyboard #972
- Add more user-friendlier description about Xorg config #974
- Renew pulseaudio document #984#985
- Lots of cleanups and refactoring
+ Known issues
- Audio redirection by MP3 codec doesn't sound with some
client, use AAC instead #965
- Update xrdp-default-config.patch
- Update xrdp-fate318398-change-expired-password.patch
- Replace references to /var/adm/fillup-templates with new
OBS-URL: https://build.opensuse.org/request/show/562234
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=31
- Update to version 0.9.4
+ Accept prefill credentials in base64 form #153#811
+ Indroduce AAC encoder to audio redirection (requires Windows 10
client)
+ Fix ocasional SEGV in drive redirection #838
+ Fix client's IP addresses in xrdp-sesman.log are always logged
as 0.0.0.0 #878#882
+ Fix ls_background_image didn't accept full path #776#853
+ Fix misuse of hidelogwindow #414#876
+ Fix WTSVirtualChannelWrite return code #859
+ Fix no longer needed socket files remained in the socket dir
#812#831
+ Make creating socket path a bit more robust #823
+ Add Belgian keyboard #858
+ Drop workaround for #848, fixed in upstream
OBS-URL: https://build.opensuse.org/request/show/529046
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=27
- Add xrdp-disable-8-bpp-vnc-support.patch:
Disable 8 bpp vnc support. Xvnc drops support for 8 bpp since
1.4.0. Trying to launch Xvnc in 8 bpp will cause it to dump core
(bsc#991059).
- Add obs source services:
+ tar_scm
+ recompress
+ set_version
- Update to version 0.9.0~git.1456906198.f422461:
Fix tarball naming from 0.9.0git to 0.9.0~git to conform openSUSE
naming scheme for pre-release version.
+ Numlock out of sync fix
+ neutrinordp: minor changes, coding style, log level
+ Update faq-compile.txt
+ Change to allow authentication against all authentication
methods.
+ Add details for crypt_level=fips to man page
+ libxrdp: no logic change, tabs to spaces
+ libxrdp: opps, fix typeo
+ Fix "\ _" on jp keyboard
+ xrdp_keyboard.ini: Fix jp keyboard model
+ update xorgxrdp
+ add keyboard options to xrdp_client_info
+ xorgxrdp=68412e5
- Add an extra legacy service action force_stop:
Forcefully killing xrdp processes when it cannot be stopped
normally.
Usage:
$ service xrdp force_stop
or
OBS-URL: https://build.opensuse.org/request/show/423916
OBS-URL: https://build.opensuse.org/package/show/X11:RemoteDesktop/xrdp?expand=0&rev=5
