FreeRDP

This release concentrates on improving test coverage and ci builds.
Some usability issues and inconvenient API functions were fixed on the way.

New features have been introduced (stub for location channel)

Noteworthy changes:

• fix a bug in RAIL mode not activating window focus (#9973)
• improve logging (#9969, #9943)
• OpenSSL <= 1.1.1 build fixes (#9897)
• improved help (#9899, #9905)
• improved MINGW support (#9914, #9915, #9919, #9964, #9965, #9920)
• fix right control ungrab for xfreerdp (#9960)
• fix RPATH option settings (#9963)
• fix SDL client screen updates (#9962, #9954)
• fix issues with childSession under windows (#9961, #9956, #9922)
• fix xfreerdp crash with +auth-only (#9947)
• fix windows printer channel (#9934)
• add support to enforce gateway policy (#9942)
• improve big endian support (#9927)
• ignore empty proxy environment variables (#9929)
• improve quoting support for command line (#9912)

For a complete and detailed change log since the last release run:
git log 3.4.0...3.3.0

This release concentrates on code cleanup and overall quality improvements.
Some usability issues and inconvenient API functions were fixed on the way.

New features have been introduced (better image clipboard) but that stays
deactivated by default as we´re in a stable series.

Check the new CMake options:

• PLUGIN_ABS_PATHS_DEFAULT disables loading of external channels from all
  but a specified absolute plugin directory defined by FREERDP_PLUGIN_PATH
• WINPR_UTILS_IMAGE_PNG enables PNG support with libpng in winpr image/clipboard
• WITH_LODEPNG enables PNG support with lodepng library in winpr image/clipboard
• WINPR_UTILS_IMAGE_WEBP enables WEBP support in winpr image/clipboard
• WINPR_UTILS_IMAGE_JPEG enables JPEG support in winpr image/clipboard
• USE_EXECINFO enables or disables backtrace support with execinfo
• WITH_WEBVIEW now defaults to OFF on windows, apple and android (not implemented)

Noteworthy changes:

• Improved image clipboard (xfreerdp, wlfreerdp) (#9873, #9826)
• Improved SDL client (#9875, #9887, #9883, #9878, #9792)
• Allow plugin loader to only use absolute paths (#9809)
• Improved TLS channel binding (#9838)
• Add GCC/clang attribute malloc wrapper WINPR_ATTR_MALLOC (#9863)
• Major clang-tidy code cleanups and bugfixes (#9799, #9834)
• Provide some defaults for wObject functions (#9799)
• Fix a bug in shadow with GFX breaking mstsc (#9818)
• Improved manpages and help (#9813, #9804)
• Blocking mode via transport IO interface (#9793)

For a complete and detailed change log since the last release run:
git log 3.3.0...3.2.0

This release mostly addresses issues reported since the last release.
Fixing some usablity and build issues as well as adding API functions
that are needed from external projects

Noteworthy changes:

• Fix proxy module load check (#9777)
• Improve kerberos error logging (#9771)
• Improve mac client keyboard handling (#9767)
• Add option to run client dynamic channel synchronous (#9764)
• Move huge struct to heap (#9763)
• Improved failure logging of license module (#9759)
• Improve server side gfx logging (#9757)
• Print shadow server help with printf instead of WLog (#9756)
• Fix SDL client timer initialization (#9754)
• Fix server peer message parsing (#9751)
• Enable NEON instructions if __ARM_NEON is defined (#9748)
• Add new proxy config file option TlsSecLevel (#9741)
• Improve android and mac os build scripts (#9735)
• Do not disable wayland support on BSD (#9730)
• Fix issues with assistance file parsing (#9727, #9728)
• Keyboard handling fixes for wayland client (#9725)
• Fix relative pkg-config file paths (#9720)
• Add new transport IO callback GetPublicKey (#9719)
• Fix wayland client scaling (#9715)

For a complete and detailed change log since the last release run:
git log 3.2.0...3.1.0

Noteworthy changes:

• Fix integer overflow in progressive decoder
• Update OpenSSL API usage for compatiblility with newer versions (#9747)
• Prevent NULL dereference for single thread decoder (#9712)

For a complete and detailed change log since the last release run:
git log 2.11.5...2.11.4

A new 3.1.0 minor release for the new 3.0.0 series.
This contains bugfixes, adds (better) support for libressl and mbedtls and
brings a bunch of improvements for the SDL client.

This comes with a price though, we now (optionally) require SDL_image if you
want to build the sdl-client

Since there are multiple new features, some new files (man pages) and new
optional dependencies we´ve directly incremented the minor version.

New CMake options:

• SDL_USE_COMPILED_RESOURCES (default ON) builds fonts and images into SDL
  client. Set to OFF to install these resources as files. (was already part of
  3.0.0, but worth mentioning here)
• WITH_SDL_IMAGE_DIALOGS (default OFF) Show some nice icons for SDL client
  connection dialogs. Requires SDL_image for build.
• WITH_BINARY_VERSIONING (default OFF) Similar as for libraries the binaries,
  manpages and resource locations created by FreeRDP project are postfixed
  with the API version. Recommended if packagers want to install the package
  alongside FreeRDP 2 without conflicts.
• RDTK_FORCE_STATIC_BUILD (default OFF) Build and link RDTK statically into
  shadow server. Recommended for packagers as this library is not really used
  outside of FreeRDP-shadow.
• UWAC_FORCE_STATIC_BUILD (default OFF) Build and link UWAC statically into
  wlfreerdp. Recommended for packagers as this library is not really used
  outside of wlfreerdp.

Noteworthy changes:

• Fix a nasty bug with relative mouse movement (#9677)
• LibreSSL support enhancements (#9691, #9670)
• mbedTLS support enhancements (#9662)
• Improve building on mac OS (#9641)
• New and improved manpages (#9690, #9650)
• Unify CMake common options, add (optional) binary versioning and allow
  building rdtk and uwac as static dependencies (#9695)
• SDL client improvements (#9693, #9657, #9659, #9683, #9680, #9657, #9664,
  #9656)

For a complete and detailed change log since the last release run:
git log 3.1.0...3.0.0

Notworthy changes:

• fix a typo in unicode commit (#9652)

Notworthy changes:

• Disabled windows MEDIA FOUNDATION h264 decoder due to reported issues (#9469)
• Fix issues with drive redirection (#9530,9554, #9586, #9617)
• Use endian safe ICU string converter (#9631)
• Improve AAC support (#9577)
• Fix swiss german keyboard layout (#9560)
• Enable rfx-mode:image (#9428)

Final 3.0.0 release just a little over two weeks after the last 3.0.0-rc0.
This contains bugfixes, drops some legacy code, implements a small feature
request and adds some improvements to the build system.

Most notably is the new PreventInSourceBuilds.cmake which does exactly what
the name implies, it aborts builds where source equals build directory.
If you can not use out of source tree builds for some reason, you can
circumvent this measure with the CMake setting -DALLOW_IN_SOURCE_BUILD=ON

Noteworthy changes:

• add support for AF_VSOCK #9561
• xfreerdp drop X11 GDI implementation #9492
• fixed connection freeze with childSession #9594
• fixed relative mouse input issues #9608
• fixed issues with drive redirection #9610
• simplified mac build #9601
• fixed TSMF to build again #9603
• fixed command line /gfx parsing bug #9598
• prevent in source tree build #9550
• fixed various issues with settings #9595, #9596
• add E2K cpu support in WinPR #9599
• fixed wfreerdp DPI settings when used as embedded window #9593
• android add mouse hover support #9495

For a complete and detailed change log since the last release run:
git log 3.0.0..3.0.0-rc0

Nearly 2 months of testing, bugfixing and API refinements later we´re
happy to announce the first release candidate for FreeRDP 3.0
The API should now be considered stable and only minor changes (if at all)
will happen from this point on, so every project using FreeRDP can check
compatibility with upcoming 3.0

Noteworthy changes:

• Updated rdpSettings API #9465:
  • getter/setter now use enum types for keys (generates compiler warnings for mismatch)
  • Refined functions (added missing, dropped problematic ones)
  • prepared opaque settings (direct struct access now deprecated)
• Server side [MS-RDPEL] channel #9471
• Relative mouse movement support #9459
• relocatable pkg-config files (enable with -DPKG_CONFIG_RELOCATABLE=ON, #9453)
• cliprdr dropped support for fuse2 (#9453)
• added support for uriparser for clipboard file:// parsing (#9455)
• aFreeRDP translation for traditional chinese (zh-rTW) added (#9450)
• fixed sdl-freerdp crash on credential dialog (#9455)
• fixed sdl-freerdp alt+tab in fullscreen (#9442)
• added /connect-child-session option (WIN32 only, #9427)
• fix rfx-image codec setup (#9425)
• added missing cmake configuration for winpr-tools (#9453)
• cleaned up cmake configuration files, dropped no longer required ones (#9455)
• fixed x11 keyboard layout detection (#9433)
• add missing API calls for server implementation (tested against ogon, #9453)
• keep dynamic channels in a hash table instead of a list (#9448)
• keep TSCredentials in server peer instance (#9430)
• fix FFMPEG/AAC encoding (#9576)
• support remote credential guard (#9574)
• fix printing on mac os 14 (#9569)
• improve RPC gateway support (#9508)
• add opus audio support for gnome-remote-desktop (#9575)
• server side handling of mouse cursor channel [MS-RDPEMSC] (#9513)
  freerdp-3.0.0-rc0.zip
  freerdp-3.0.0-rc0.tar.gz

Noteworthy changes:

• Improved and fixed AVD authentication, now allows retries for
  machines just starting up
• Improve RDP file parser, prepare new fields used by AVD
• Fixed and improved pen support in multitouch implementation (xfreerdp)
• Lots of smaller code and leak cleanups
  freerdp-3.0.0-beta4.zip
  freerdp-3.0.0-beta4.tar.gz

Notworthy changes:

• Backported #9378: backported wArrayList (optional) copy on insert
• Backported #9360: backported certificate algorithm detection

freerdp-2.11.2.zip
freerdp-2.11.2.tar.gz

Notworthy changes:

• Backported #9356: Fix issues with order updates

For a complete and detailed change log since the last release run:
git log 2.11.1...2.11.0

Noteworthy changes:

• fix xfreerdp keyboard on mac os
• Various crashes and input check fixes
• Improved logging of autodetect, redirection and fastpath failures
• Smartcard emulation now selectable at runtime
• Allow certificates without a subject to pass client checks
• Fix FindFirstFile issues on android
• Add FREERDP_ENTRY_POINT to silence -Wmissing-prototypes warnings for
  library entry points
• Add WINPR_RESTRICT to enable restrict (C99) or __restring (MSVC)
  keywords for compiler
• Fix support for older OpenSSL versions

For a complete and detailed change log since the last release run:
git log 3.0.0-beta3..3.0.0-beta2

Noteworthy changes:

• Various input validation fixes
• Added various CMake options #9317
• LibreSSL build fixes #8709

Fixed issues:

• Backported #9233: Big endian support
• Backported #9099: Mouse grabbing support
• Backported #6851: wayland scrolling fix
• Backported #8690: Update h264 to use new FFMPEG API
• Backported #7306: early bail from update_read_window_state_order breaks protocol
• Backported #8903: rdpecam/server: Remove wrong assertion
• Backported #8994: bounds checks for gdi/gfx rectangles
• Backported #9023: enforce rdpdr client side state checks
• Backported #6331: deactivate mouse grabbing by default
• Cherry-pick out of #9172: channels/cliprdr: Fix writing incorrect PDU type for unlock PDUs

Noteworthy changes:

• Update CMake defaults, now all features are enabled by default with a platform
  independent option if multiple are available.
• SDL client: (basic) multimonitor support
• SDL client: fix dialog cleanup order (crash fix)
• clipboard: fix FUSE shutdown crash
• fixed drive redirection: FindNextFile did miss some files/directories
• improved AAD support: honor rdp file options
• improved (gateway) http failure logging
• improved shadow server error handling
• improved CMake configuration (using find_dependency)
• updated timezone definitions
• mbedTLS build fixed
• improved MINGW build support

For a complete and detailed change log since the last release run:
git log 3.0.0-beta2..3.0.0-beta1

freerdp-3.0.0-beta1.zip
freerdp-3.0.0-beta1.tar.gz
We are pleased to announce the first beta release for the next stable 3.0
series of FreeRDP. It has been a huge endeavour to implement all the new
shiny bells and whistles as well as clean up the code base and we´re still
ironing out some smaller glitches.
This is the first API breaking change since the 2.0 series and there are
some adjustments to be made for existing applications.
See https://github.com/FreeRDP/FreeRDP/wiki/FreeRDP3-migration-notes for
help (still incomplete)

Noteworthy changes:

• Support for AAD/AVD authentication
• Support for websocket transport
• Support smartcard authentication (TLS and NLA)
• Full smartcard emulation support (login with certificate + key)
• Rewritten proxy, new module API
• New reference client based on SDL2 (work in progress)
• Rewritten logging, now parsing issues are all writing to the log so
  that issues with protocol incompatibilities can be easier analyzed
  by just turning on logging
• Full OpenSSL 3 support
• Internal implementations for RC4, MD4 and MD5 (required for non critical
  parts in RDP but not part of more recend SSL libraries)
• Updated RDP protocol support
• Improved xfreerdp remote app support
• Reworked internal state machine for both client and server implementations
• Server implementations can now make use of connect-time network autodetection
• Improved clipboard handling, now also support server-to-client file transfer
  (currently xfreerdp only)
• EnhancedRemoteApp support: Utilizing the more modern standard allows remote
  apps with less glitches and window shadows
• Added client- and server-side handling for RDSTLS
• Support for the graphics redirection channel

For a complete and detailed change log since the last release run:
git log 3.0.0-beta1..2.10.0

Notewhorth changes:

• Fix android build scripts, use CMake from SDK
• Fix connection negotiation with mstsc/msrdc #8426
• [ntlm]: use rfc5929 binding hash algorithm #8430
• [channels,printer] Fixed reference counting #8433
• Fix uwac pixman #8439
• Fix Rdp security #8457
• [client,x11] Detect key autorepeat #8522
• [build] add channel path to RPATH #8551
• Fix build with BUILTIN_CHANNELS=OFF #8560
• revert changes so that the osmajortype/osminortype is not overwritten #8571
• [uwac] do not use iso C functions #8604
• [winpr,sam] fix inalid NULL arguments #8605
• Fix incompatible function pointer types #8625

Fixed issues:

• Backported #8581: Ignore data PDUs for DVCs that were not opened successfully
• Backported #8498: [channel,urbdrc] fix type of usb hotplug callback
• Backported #8537: Extended info enforce limits
• Backported #8611: [core] add missing redirection fields

Notewhorth changes:

• Backported #8252: Support sending server redirection PDU
• Backported #8406: Ensure X11 client cursor is never smaller 1x1
• Backported #8403: Fixed multiple client side input validation issues
  (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319,
  CVE-2022-39320, CVE-2022-41877, CVE-2022-39347)
• Backported #7282: Proxy server now discards input events sent before
  activation was received
• Backported #8324: Internal replacements for md4, md5 and hmac-md5
  For the time being the RDP protocol requires these outdated hash
  algorithms. So any distribution that wants to ship a working
  FreeRDP should check the options WITH_INTERNAL_MD4 (and depending
  on OpenSSL deprecation status WITH_INTERNAL_MD5)

Fixed issues:

• Backported #8341: Null checks in winpr_Digest_Free
• Backported #8335: Missing NULL return in winpr_Digest_New
• Backported #8192: Support for audin version 2 microphone channel
• Backported #7282: Discard input events before activation (Fixes #8374)

For a complete and detailed change log since the last release run:
git log 2.8.1..2.9.0

Thanks to "Team BT5 (BoB 11th)" for reporting the security issues.

Notewhorth changes:

• Fixed CVE-2022-39282
• Fixed CVE-2022-39283
• Added missing commit for backported #8041: Remove ALAW/ULAW codecs from linux backends (unreliable)
• Added hash checks for android build script dependencies

Fixed issues:

• #8190: Fix build break with newer FFMPEG versions
• #8234: Updated flatpak with build script
• #8210: Better execinfo support check for android
• #7708: Header now defines DumpThreadHandles
• #8176: Check fullscreen state and not setting
• #8236: Send resize on window state change
• #7611: Audin macOS monterey fix
• #8291: Android build script update
• Fix length checks and initialization in the deprecated (disabled per default) tsmf channel

Noteworthy changes:

• Backported API to get peer accepted channel option flags
• Backported API to get peer accepted channel names
• Backported Stream_CheckAndLogRequiredLength
• Backported #7954: Add server side handling for [MS-RDPET]
• Backported #8010: Add server side handling for [MS-RDPECAM]
• Backported #8041: Remove ALAW/ULAW codecs from linux backends (unreliable)
• Backported #8051: Relieve CLIPRDR filename restriction when connecting to non-MS Windows servers
• Backported #8048: TLS version control
• Backported #7987: Add a new command line arg to enforce tls1.2

Fixed issues:

• Fixed #7837: Prevent out of bound reads for FFMPEG
• Backported #7859 and #7861: Unwind support for backtrace generation
• Backported #7440: wlfreerdp appid
• Backported #7832: RAIL window restore
• Backported #7833: Refactored WinPR thread locking
• Backported #7893: Mac rdpsnd memory leak fixes
• Backported #7895: Mac audin memory leak fixes
• Backported #7898: Automatic android versioning
• Backported #7916: GFX 10.7 capability support
• Backported #7949: Server RDPSND API improvements
• Backported #7957: Server DVC API improvements
• Backported #7760: Fixed osMinorType values
• Backported #8013: Add missing osMajorType values
• Backported #8076: Fix wrong usage of subband diffing flag (tile artifact fix)