NEWS v0.9 - neutrinolabs/xrdp GitHub Wiki

Release notes for xrdp v0.9.25.1 (2024/03/13)

This release fixes a bug that occurred in v0.9.25 where scrolling did not work in the Xvnc backend.

Thanks to @bsmojver reporting the issue and testing!

General announcements

This is the last v0.9.x version which is released regularly. v0.9.x will be maintained for a while but less actively. New releases will happen only when severe security vulnerabilities or critical bugs are found.

We have created a fund on Open Collective. Support us if you like xrdp! Direct donations to each developer via GitHub Sponsors are also welcomed.

Bug fixes

Mouse wheel scrolling in Xvnc session no longer works in 0.9.25 (#2993 #2994)

Release notes for xrdp v0.9.25 (2024/03/11)

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future v1.0 release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

General announcements

We have created a fund on Open Collective. Support us if you like xrdp! Direct donations to each developer via GitHub Sponsors are also welcomed.

Security fixes

No new security fixes in this release.

Bug fixes

Backport touchpad inertial scrolling (#2364 #2424 #2948).

New features

If the client announces support for the Image RemoteFX codec it is logged (back-port of #2946)

Internal changes

FreeBSD CI version bumped to 13.2 from 12.4 (#2897)
Some test timeouts have been increased for slow CI machines (#2903)

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.24 (2023/12/30)

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future v1.0 release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

General announcements

We have created a fund on Open Collective. Support us if you like xrdp!

Direct donations to each developer via GitHub Sponsors are also welcomed.

Security fixes

No new security fixes in this release.

Bug fixes

Checking group membership should now work better on systems using directory services (#2806 #2817)
Pasting more than 32K characters of text to the clipboard now succeeds (#1839 #2824)
An incompatibility with FreeRDP 2.11.2 in the drive redirector has been fixed (#2834 #2839)

New features

Side buttons on some mice are now supported by NeutrinoRDP (#2860). Thanks to new contributor @naruhito for this patch.

Internal changes

cppcheck version used for CI bumped to 2.13.0 (#2830/#2887). Note that this greatly increases cppcheck scan times.

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.23.1 (2023/09/27)

This is a security fix release for CVE-2023-42822. This update is recommended for all xrdp users.

Security fixes

CVE-2023-42822: Unchecked access to font glyph info

Bug fixes

No bug fixes other than the above security fix in this release.

New features

No new features in this release.

Internal changes

cppcheck install script no longer installs z3 for cppcheck >= 2.8 (#2782)

Release notes for xrdp v0.9.23 (2023/08/31)

General announcements

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future v1.0 release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

Security fixes

CVE-2023-40184: Improper handling of session establishment errors allows bypassing OS-level session restrictions (Reported by @gafusss)

Bug fixes

Environment variables set by PAM modules are no longer restricted to around 250 characters (#2712)
X11 clipboard clients now no longer hang when requesting a clipboard format which isn't available (#2767)

New features

No new features in this release.

Internal changes

Introduce release tarball generation script (#2703)
cppcheck version used for CI bumped to 2.11 (#2738)

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.22.1 (2023/05/23)

This release is just a re-packing of source code tarball since v0.9.22 tarball includes invalid source code (#2687).

See v0.9.22 release note for functional changes since v0.9.22.1 is what v0.9.22 should be.

Thanks to @morgancoxuk and @bsmojver for reporting and testing!

References

Release notes for xrdp v0.9.22 (2023/05/07)

General announcements

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future v1.0 release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

Security fixes

No security fixes in this release.

New features

Empty passwords are no longer automatically passed through to sesman for authentication (#2509)
Don't try to listen on the scard socket if it isn't there (#2507)
The directory where PAM configuration files are installed can now be set with --with-pamconfdir (#2552 #2557 #2566)
Sesman can now be configured to ignore alternate shells passed from the client (#2634)
Allow longer UserWindowManager strings (#2653)

Bug fixes

Minor documentation fixes (#2508 #2582)
Memory management fixes to list module (#2548 #2577)
Fix some noise when MP3/AAC are in use and some logging improvements (#2519 #2537 #2554)
Fix potential NULL dereferences in chansrv (#2574)
An erroneous free in the smartcard handling code has been removed (#2611)
An unnecessary 'check.h' include was removed which prevented compilation on Arch systems (#2650)

Internal changes

cppcheck version used for CI bumped to 2.10 (#2521)
g_malloc, g_free, g_memset, and g_memcpy are now macros. These should not be used in new code (#2612)
FreeBSD CI now runs on FreeBSD 12.4 (#2622)

Changes for packagers or developers

openSUSE Bug 1208121 has been addressed in upstream

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.21.1 (2022/12/13)

This release only includes following fix for packagers. Packagers try to build xrdp on distributions other than Arch Linux, Debian, SUSE, Red Hat(ish), FreeBSD and macOS may be required to use this release.

Changes for packagers or developers

Add missing xrdp-sesman.system to distributed tarball (#2466 #2468)

Release notes for xrdp v0.9.21 (2022/12/10)

General announcements

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future v1.0 release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

Security fixes

This update is recommended for all xrdp users and provides following important security fixes:

These security issues are reported by Team BT5 (BoB 11th). We appreciate their great help with making and reviewing patches.

New features

openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts (#2413)
VNC backend session now supports extra mouse buttons 6, 7 and 8 (#2426)

Bug fixes

Passwords are no longer left on the heap in sesman (#1599 #2439)
Set permissions on pcsc socket dir to owner only (#2454 #2460)

Internal changes

CI updates to cope with github upgrades (#2395)

Changes for packagers or developers

Nothing this time.

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.20 (2022/09/15)

General announcements

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future v1.0 release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

New features

Mitigation for too fast vertical scroll has been implemented. This is actually not a new feature of xrdp so see also xorgxrdp v0.9.19 release note.

Bug fixes

Windows RDS compatibility has been improved, so some old clients (e.g. Wyse Sx0) can now be used again with xrdp in non-TLS mode (#2273)
Update xrdpapi simple example to work with new logging (#2276)
sesman: fix spacing in log (#2282)
Fix MSTSC crashes when resolution is changed by maximizing on a different monitor (#2292 #1928)
Mark count with unused attribute (#2353)
Simple maintenance improvements (#2354)

Internal changes

FreeBSD version for CI bumped to 12-3 (#2226)
cppcheck version used for CI bumped to 2.9 (#2351)

Changes for packagers or developers

Nothing this time.

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.19 (2022/03/17)

General announcements

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

New features

Both inbound and outbound clipboards can now be restricted for text, files or images [Sponsored by @CyberTrust @clear-code and @kenhys] (#2087)

Bug fixes

CVE-2022-23613: Privilege escalation on xrdp-sesman (This fix is also in the out-of-band v0.9.18.1 release)
The versions of imlib2 used on RHEL 7 and 8 are now detected correctly (#2118)
Some situations where zombie processes could exist have been resolved (#2146, #2151, #2168)
Some null-pointer exceptions which can happen in the logging module have been addressed (#2149)
Some minor logging errors have been corrected (#2152)
The signal handling in sesman has been reworked to prevent race conditions when a child exits. This has also made it possible to reliably reload the sesman configuration with SIGHUP (#1729, #2168)

Internal changes

Versions 0.13 and later of checklib can undefine the pre-processor symbol HAVE_STDINT_H. The xrdp tests now build successfully against these versions (#2124)
OpenSSL packaging changes (#2130):-
- The OpenSSL 3 EVP interface is now fully supported
- When building against OpenSSL 3, an internal implementation of the RC4 cipher is used instead of the implementation from the OpenSSL legacy provider
- The wrapping of the OpenSSL library has been improved which should make it simpler to provide an alternative cryptographic provider in the future, if required
- The logging of TLS/non-TLS security negotiation has been improved
cppcheck version used for CI bumped to 2.7 (#2140)
The s_check() macro which is easily mis-used has been removed (#2144)
Status values for the DRDYNVC channel are now available in libxrdp/xrdp_channel.h

Changes for packagers or developers

On OpenSSL 3 systems, there is now no need to build with the -Wno-error=deprecated-declarations flag

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.18.1 (2022/02/08)

This is a security fix release that includes fixes for the following privilege escalation vulnerability.

CVE-2022-23613: Privilege escalation on xrdp-sesman

Users who uses xrdp v0.9.17 or v0.9.18 are recommended to update to this version.

Special thanks

Thanks to Gilad Kleinman reporting the vulnerability and reviewing fix.

Release notes for xrdp v0.9.18 (2022/01/10)

General announcements

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.
Special thanks for @trishume for contributing code to the RFX codec

New features

Backgrounds and logos on the login screen can now be zoomed and scaled (#1962)
Small change for Alpine Linux support (#2005)
loongarch support (#2057)
Improved Fail2ban support (#1976)

Bug fixes

Logging is improved for security protocol level decisions (#1974, #1975)
An unnecessary log error message which is always generated when running neutrinordp has been removed (#2016)
An incorrect development log message has been fixed (#2074)
Some informational and error messages written to the console on stdout have been removed or replaced with log messages (#2078 #2080)
Failure to attach to the memory area shared with xorgxrdp is now logged (#2065)
A regression in the VNC module logging which might cause a connection to drop out has been identified and fixed (#1989)
Remote drive redirection now works if printer redirection is also requested by the client (#327)
Some file names could not be copied from the client to the server over the clipboard. This is now fixed (#1992, #1995)
A config value has been added which allows copy-pasting of files to work with Nautilus for GNOME 3 versions >= 3.29.92 (#1994, #1996)
Clipboard now works properly when files can't be read (#1997 #2001)
(xorgxrdp v0.2.18) The screen is fully refreshed after initialising shared memory which should fix black screen problems like #1964
An incorrect initialisation reported by @qarmin has been fixed (#1909)
Some minor memory leaks have been fixed (#2014 #2028)
A hard hang in chansrv when copying files from the remote system has been addressed (#2032)
Users can now capitalise username and password on the login screen if required (#2061)
Some failed size checks in the fastpath code with --enable-devel-streamcheck have been addressed (#2066,#2070)
Log level for clipboard restriction has been promoted from DEVEL DEBUG to INFO (#2088)
A buffer overflow in the RFX codec associated with large screens has been fixed (#2087)

Internal changes

Some 64-bit packages are removed during the 32-bit CI build process in an attempt to make this more robust (#1985)
Minor improvements to error checking and logging for file copy-paste (#1996)
Now uses cppcheck 2.6 for CI builds (#2008)
Generated systemd unit files now ignored by git (#2006)
More internal tests (#2015)
Some unnecessary files have been removed from the distribution (#2030)
The which command in shell scripts has been replaced with command -v (#2067)
Additional unit tests added for g_file_get_size() (#1988)
A compiler warning with -O3 on gcc 11.1 has been addressed (#2105)
An unused declaration for xrdp_wm_drdynvc_up has been removed (#2098)
The SCP V0 code has been unified, which will make it easier to update and replace (#2011)
Monitor processing unit tests for existing xrdp_sec function have been added (#1932)
The librfxcodec has been updated as part of #2087, and also to add stack frames to assemble code to assist debugging

Changes for packagers or developers

The --with-imlib2 option has been added. If xrdp is built with imlib2, the login screen supports more image formats for the background and logo, and better quality zooming and scaling (#1962)

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.17 (2021/08/31)

General announcements

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

New features

The IP address, port, and user name of NeutrinoRDP Proxy connection are logged in xrdp.log - these connections may not have a sesman log to use (#1873)
The performance settings for NeutrinoRDP can be now configured (#1903)
Support for Alpine Linux in startwm.sh (#1965)
clipboard: log file transfer for the purpose of audit (#1954)
Client's Keyboard layout now can be overridden by xrdp configuration for debugging purposes (#1952)

Bug fixes

PAM_USER environment variable is not set when using pam_exec module (#1882)
Allow common channel settings to be overridden for modules as well as chansrv (#1899)
The text only-copy/paste interface for the VNC module (used only when chansrv is not active) has been improved (#1900)
The unsupported tcutils utility has been removed (#1943)
The quality of TLS logging has been improved (#1926)
Keyboard information is now passed correctly through NeuutrinoRDP, and can be overridden if required (#1934)
A message is now logged in the sesman log for unsuccessful login attempts detailing the user used (#1947)

Internal changes

astyle formatting is now checked during CI builds (#1879)
Generalise development build options, and add --enable-devel-streamcheck (#1887)
Now uses cppcheck 2.5 for CI builds (#1938)
The SCP protocol is now using a standard struct trans for messaging rather than its own thing (#1925)

Changes for packagers or developers

The --enable-xrdpdebug developer option has been replaced with finer-grained --enable-devel-* options. Consequently, specifying --enable-xrdpdebug is now an error (#1913)

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.16 (2021/04/30)

New features

On-the-fly resolution change now supported for Xvnc and Xorg (#448, #1820) - thanks to @Nexarian for this significant first contribution. See the following YouTube video for a demo.
- [Windows] https://youtu.be/cZ0ebieZHeA
- [Mac] https://youtu.be/6kfAkyLUgFY
xrdp can now use key algorithms other than RSA for TLS (#1776)
Do not spit on the console 2nd stage (inspired by Debian) #1762
Unified and improved logging (#1742, #1767, #1802, #1806, #1807, #1826, #1843) - thanks to @aquesnel for this detailed work.
Other logging level fixes (#1864)
chansrv can now work on DISPLAY=:0 so it can be used with x11vnc/Vino/etc sessions (#1849)

Bug fixes

Fix some regressions in sesman auth modules (#1769)
Minor manpage fixes (#1787)
Fix TS_PLAY_SOUND_PDU_DATA to set the correct frequency and duration (#1793)
Fix password leakage to logs in NeutrinoRDP module (#1872) - thanks to @TOMATO-ONE for reporting.

Internal changes

cppcheck version for CI bumped to 2.4 (#1771, #1836)
FreeBSD version for CI bumped to 12-2 (#1804)
Support for check unit test framework added (#1843, #1860)
FreeBSD FUSE module now compiles under CI but needs additional work (#1856)
Compilation support added for additional Debian platforms (#1818)
Refactoring:-
- Confusing preprocessor macro USE_NOPAM replaced with USE_PAM (#1800)
- Window manager states in xrdp executable now use symbolic constants instead of numbers (#1803)
Documentation improvements
- KRDC added to client list (#1817)
- Platform support tier added (#1822)
- README file revised (#1863)
Don't install test+development executables by default (#1858)

Changes for packagers

These changes are likely to impact operating system package builders and those building xrdp from source.

(#1843, #1860) This release introduces an additional optional compile-time dependency on the check unit test framework. The dependency is recommended when packaging for compile-time tests.
(#1858) The executables memtest and tcp_proxy are no longer copied to the sbin directory on a package install.

Known issues

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (#1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (#1867)

Release notes for xrdp v0.9.15 (2020/12/28)

New features

Allow token sign in without autologon for SSO (#1667 #1668)
Norwegian keyboard support (#1675)
Improved config support for chansrv (#1635)
Unified chansrv, sesman and libxrdp logging (#1633 #1708 #1738) - thanks to @aquesnel
Support SUSE move to /usr/etc (#1702)
Parameters may now be specified for user-specified shell (#1270 #1695)
xrdp executables now allow alternative config files to be specified with -c (#1588 #1650 #1651)
sesrun improvements (#1741)
Drive redirection location can now be specified (#1048)
Now compiles on RISC-V (#1761)

Bug fixes

Additional buffer overflow checks (#1662)
FUSE support now builds on 32-bit platforms (#1682)
genkeymap array size conflict fixed (#1691)
Buffering issue with neutrinordp over a slow link fixed (#1608 1634)
Various documentation fixes (#1704 #1741 #1755 #1759)
Prevent PAM info message from causing authentication failure (#1727)
Cosmetic fixes for minor issues (#1751 #1755 #1749)
Try harder to clean up socket files on session exit (#1740 #1756)
xrdp-chansrv become defunct in docker while file copy (#1658)

Internal changes

Compilation warnings with newer compilers (#1659 #1680)
Continuation Integration checks on 32-bit platforms now include FUSE support (#1682)
Continuation Integration builds now default to the Ubuntu Focal platform (#1666)
FUSE type tidy-ups (#1686)
Switch from Travis CI to GitHub Actions (#1728 #1732)
Easier to set up console logging for utilities (#1711)

Release notes for xrdp v0.9.14 (2020/08/31)

New features

VNC multi-monitor support if you are using a suitable Xvnc server #1343
VNC sessions now resize by default on reconnection if you are using a suitable Xvnc server #1343
Support Slackware for PAM #1558 #1560
Support Programmer Dvorak Keyboard #1663

[HEADS UP] The VNC changes are significant. They described in more detail on the following wiki page.

Xvnc backend : Multi monitor and resize support

Bug fixes

Fix odd shift key behavior (workaround) #397 #1522
Fix Xorg path in the document for Arch Linux #1448 #1529
Fix Xorg path in the document for CentOS 8 #1646 #1647
Fix internal username/password buffer is smaller than RDP protocol specification #1648 #1653
Fix possible memory out-of-bounds accesses #1549
Fix memory allocation overflow #1557
Prevent chansrv input channels being scanned during a server reset #1595
Ignore TS_MULTIFRAGMENTUPDATE_CAPABILITYSET from client if fp disabled #1593
Minor manpage fixes #1611

Other changes

CI error fixes
Introduce cppcheck

Known issues

FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to xrdp's bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.13.1 (2020/06/30)

This is a security fix release that includes fixes for the following local buffer overflow vulnerability.

CVE-2020-4044: Local users can perform a buffer overflow attack against the xrdp-sesman service and then impersonate it

This update is recommended for all xrdp users.

Special thanks

Thanks to Ashley Newson reporting the vulnerability and reviewing fix.

Release notes for xrdp v0.9.13 (2020/03/11)

This release is an intermediate bugfix release. The previous version v0.9.12 has some regressions on drive redirection.

Bug fixes (drive redirection related)

Fix chansrv crashes with segmentation fault (regression in #1449) #1487
Drive redirection now supports Guacamole client #1505 #1507
Prevent a coredump in the event of a corrupted file system #1507
Resolve double-free in chansrv_fuse #1469

Bug fixes (other)

Fix the issue xrdp --version | less will show empty output #1471 #1472
Fix some warnings found by cppcheck #1479 #1481 #1484 #1485

Other changes

Add FreeBSD CI test #1466
Move Microsoft-defined constants into separate includes #1470
Perform cppcheck during CI test #1493
Support mousex button 8/9 #1478

Known issues

FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to xrdp's bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.12 (2019/12/28)

Bug fixes

Fix "The log reference is NULL" error when sesman startup #1425
Fix behavior when shmem_id changes #1439
Make vsock config accept -1 for cid and port #1441
Cleanup refresh rect and check stream bounds #1437
Significant improvements in drive redirection #1449
Fix build on macOS Catalina #1462

Other changes

Proprietary microphone redirection via rdpsnd is now default off RDP compatible microphone redirection is on instead #1427
Skip connecting to chansrv when no channels enabled #1393
Add openSUSE's pam rules #1442
Do not terminate xrdp daemon when caught SIGHUP #1319

Known issues

FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to xrdp's bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.11 (2019/08/19)

New features

Suppress output (do not draw screen when client window is minimized) #1330
Audio input (microphone) redirection compatible with MS-RDPEAI #1369
Now xrdp can listen on more than one port #1124 #1366

Bug fixes

Fix the issue audio redirection sometimes sounds with long delay #1363
Check term event for more responsive shutdown #1372

Known issues

FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to xrdp's bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.11 (2019/08/19)

New features

Suppress output (do not draw screen when client window is minimized) #1330
Audio input (microphone) redirection compatible with MS-RDPEAI #1369
Now xrdp can listen on more than one port #1124 #1366

Bug fixes

Fix the issue audio redirection sometimes sounds with long delay #1363
Check term event for more responsive shutdown #1372

Known issues

FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to xrdp's bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.10 (2019/04/18)

Special thanks

Thank you for matt335672 contributing to lots of improvements in drive redirection!

New features

Restrict outbound (server->client) clipboard transfer, configured in sesman.ini #1298

Bug fixes

Fix the issue libscp v1 not setting width but height twice #1293
Fix the issue reconnecting to session causes duplicate drive entries in fuse fs #1299
Fix default_wm and reconnect_sh refer wrong path after sesman caught SIGUP #1315 #1331
Shutdown xrdp more responsively #1325
Improve remote file lookup in drive redirection #996 #1327
Overwriting & appending to existing files is are now supported #1327

Other changes

Add Danish Keyboard #1290
Put xrdp- prefix to some executables appear in man page #1313
Replace some URLs from SF.net to xrdp.org #1313

Known issues

FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to xrdp's bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.9 (2018/12/25)

Release cycle

From the next release, release cycle will be changed from quarterly to every 4 months. xrdp will be released in April, August, December.

New features

Disconnection by idle timeout (requires xorgxrdp v0.2.9 or later) #1227
Glyph cache v2 (fixes no font issue on iOS/macOS/Android client) #367 #1235

Bug fixes

Fix xrdp-chansrv crashes caused in drive redirection #1202 #1225
Fix build with FDK AAC v2 #1257
Do not enable RemoteApp if the INFO_RAIL flag is not set (RDP-RDP proxy) #1253

Other changes

Add Spanish Latin Amarican keyboard #1237 #1240 #1244
Dynamic channel improvements #1222 #1224
Remove some deprecated sesman session types #1232
Refactoring and cleanups

Known issues

FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp due to xrdp's bad-mannered behaviour, add +glyph-cache option to FreeRDP to connect #1266
Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.8 (2018/09/25)

Deprecation notice

We removed TLSv1 and TLSv1.1 from the default config. The current default is TLSv1.2 and TLSv1.3. Users can whenever re-enable these early TLS versions by editing xrdp. To use TLSv1.3, OpenSSL or LibreSSL must support TLSv1.3. You can know the OpenSSL or LibreSSL version by xrdp --version command that compiled with xrdp.

New features

Add TLSv1.3 support #1193

Bug fixes

Ensure unmount redirected drive on fatal X error #1140

Other changes

Show more helpful message if xrdp-dis failed #1206
Pass pulse socket name via environment variable #1198
Fix xrdp's log path in man page #1168

Release notes for xrdp v0.9.7 (2018/06/29)

Deprecation notice

x11rdp has been removed from xrdp reposiory and stored in the separate repository. Checkout x11rdp repository if you still need x11rdp. In most cases, xorgxrdp can replace x11rdp.

Bug fixes

Fix endianness detection on ppc64el #1082
Fix a bug xrdp file copy slow #1112 #1132
Copy the PAM session environment for the reconnect script #1120
Accept fullpath for DefaultWindowManager, ReconnectScript #1147

Other changes

Add PAM support for Arch Linux #1078
Show OpenSSL version to '--version' CLI option #1096
Separate x11rdp from xrdp repository #1104
Support sesrun start xorgxrdp sessions #1108
Show configure summary when configure is done #1126 #1134 #1137
Less spit on the console when sesman starts #1142
Fix memory leaks #1146
Separate rc script for FreeBSD into xrdp and xrdp-sesman #1153
Improve documents and helps

Known issues

Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.6 (2018/03/26)

Compatibility notice

Exclamation mark (!) has been removed from comment out symbol of config files. Use number sign (#) or semicolon (;) instead. As a result of this change, now you can use exclamation mark as config value such as in tls_ciphers.

tls_ciphers=HIGH:!aNULL:!eNULL:!EXPORT:!RC4

macOS supports

Please note that xrdp still doesn't support macOS officially so far. However, a volunteer is working on macOS compatibility.

Generate dylibs for macOS #1015
Add PAM support for macOS #1021

Bug fixes

Make listen check before daemon fork #988
Fix xrdp sometimes become zombie processes #1000
Include hostname in sesman password file name #1006 #1007 #1076
Fix default startwm.sh to use bash explicitly #1009 #1049
Fix the issue FreeBSD doesn't acknowledge terminated sessions #1016 #1030

Other changes

Add Swiss French keyboard #1053
Improve perfect forward secrecy, explicitly enable ECDHE/DHE #1024 #1052 #1063
Lots of leak fixes, cleanups and refactoring

Known issues

Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.5 (2017/12/27)

Security fixes

Fix local denial of service CVE-2017-16927 #958 #979

New features

Add a new log level TRACE more verbose than DEBUG #835 #944
SSH agent forwarding via RDP #867 #868 FreeRDP/FreeRDP#4122
Support horizontal wheel properly #928

Bug fixes

Avoid use of hard-coded sesman port #895
Workaround for corrupted display with Windows Server 2008 using NeutrinoRDP #869
Fix glitch in audio redirection by AAC #910 #936
Implement vsock support #930 #935 #948
Avoid 100% CPU usage on SSL accept #956

Other changes

Add US Dvorak keyboard #929
Suppress some misleading logs #964
Add Finnish keyboard #972
Add more user-friendlier description about Xorg config #974
Renew pulseaudio document #984 #985
Lots of cleanups and refactoring

Known issues

Audio redirection by MP3 codec doesn't sound with some client, use AAC instead #965

Release notes for xrdp v0.9.4 (2017/09/28)

New features

Accept prefill credentials in base64 form #153 #811
Indroduce AAC encoder to audio redirection (requires Windows 10 client)

Bugfixes

Fix ocasional SEGV in drive redirection #838
Fix client's IP addresses in xrdp-sesman.log are always logged as 0.0.0.0 #878 #882
Fix ls_background_image didn't accept full path #776 #853
Fix misuse of hidelogwindow #414 #876
Fix WTSVirtualChannelWrite return code #859
Fix no longer needed socket files remained in the socket dir #812 #831
Make creating socket path a bit more robust #823

Other changes

Add Belgian keyboard #858
Add a PAM file for FreeBSD #824
Several refactorings and cosmetic changes

Known issues

Windows 10 (1703) shows black blank screen in RemoteFX mode
This issue is already fixed at Insider Preview build 16273

Release notes for xrdp v0.9.3.1 (2017/08/16)

This release fixes a trivial packaging issue #848 occurred in v0.9.3. The issue only affects systemd systems. This release is principally for distro packagers or users who compile & install xrdp from source.

Users who running xrdp on these systems don't need to upgrade from v0.9.3 to v0.9.3.1.

Linux systems without systemd
non-Linux systems such as BSD operating systems

Release notes for xrdp v0.9.3 (2017/07/15)

New features

Log user-friendly messages when certificate/privkey is inaccessible

Bugfixes

Now sesman sets mandatory LOGNAME environment variable #725
Now sesman ensures socket directory present #801
Exit with failure status if port already in use #644
Eliminate some hard coded paths
Fix glitches with IPv4 struct initialization #803
Fix some keyboard layout integration (UK, Spanish)
Fix handle OS when IPv6 disabled #714
Fix issues around systemd session #778
Fix protocol error when 32 bit color and non RemoteFX session #737 #804
Fix sesadmin shows error when no sessions #797
Fix TLS spins 100% CPU #728
Fix Xvnc backend disconnects when some data copied to clipboard #755
Pick up the first section if given section(domain) doesn't match anything #750

Other changes

Change xrdp-chansrv log path to include display number
Optimize startwm.sh for SUSE
Several cleanups and optimizations

Known issues

Windows 10 (1703) shows black blank screen in RemoteFX mode

Release notes for xrdp v0.9.2 (2017/03/30)

New features

RemoteFX codec support is now enabled by default.
Bitmap updates support is now enabled by default.
TLS ciphers suites and version is now logged.
Connected computer name is now logged.
Switched to Xorg (xorgxrdp) as the default backend now.
Miscellaneous RemoteFX codec mode improvements.
Socket directory is configurable at the compile time.

Bugfixes

Parallels client for MacOS / iOS can now connect (audio redirection must be disabled on client or xrdp server though).
MS RDP client for iOS can now connect using TLS security layer.
MS RDP client for Android can now connect to xrdp.
Large resolutions (4K) can be used with RemoteFX graphics.
Multiple RemoteApps can be opened throguh NeutrinoRDP proxy.
tls_ciphers in xrdp.ini is not limited to 63 chars anymore, it's variable-length.
Fixed an issue where tls_ciphers were ignored and rdp security layer could be used instead.
Kill disconnected sessions feature is working with Xorg (xorgxrdp) backend.
Miscellaneous code cleanup and memory issues fixes.

Release notes for xrdp v0.9.1 (2016/12/21)

New features

New xorgxrdp backend using existing Xorg with additional modules
Improvements to X11rdp backend
Support for IPv6 (disabled by default)
Initial support for RemoteFX Codec (disabled by default)
Support for TLS security layer (preferred over RDP layer if supported by the client)
Support for disabling deprecated SSLv3 protocol and for selecting custom cipher suites in xrdp.ini
Support for bidirectional fastpath (enabled in both directions by default)
Support clients that don't support drawing orders, such as MS RDP client for Android, ChromeRDP (disabled by default)
More configurable login screen
Support for new virtual channels:
- rdpdr: device redirection
- rdpsnd: audio output
- cliprdr: clipboard
- xrdpvr: xrdp video redirection channel (can be used along with NeutrinoRDP client)
Support for disabling virtual channels globally or by session type
Allow to specify the path for backends (Xorg, X11rdp, Xvnc)
Added files for systemd support
Multi-monitor support
xrdp-chansrv stroes logs in ${XDG_DATA_HOME}/xrdp now

Security fixes

User's password could be recovered from the Xvnc password file
X11 authentication was not used