Re: [BLFS Trac] #23188: FreeRDP-3.25.0

"BLFS Trac" ([email protected] via blfs-book Mailing List) <[email protected]>
Newsgroups gmane.linux.lfs.beyond.book
Message-ID <[email protected]>
#23188: FreeRDP-3.25.0
-------------------------+-------------------------------
 Reporter:  Bruce Dubbs  |       Owner:  SecurityAdvisory
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  13.1
Component:  BOOK         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-------------------------------
Changes (by Joe Locash):

 * owner:  Joe Locash => SecurityAdvisory
 * status:  assigned => new

Comment:

 {{{
 2026-04-23 Version 3.25.0

 Bugfix and feature release.
     - Experimental AV1 support has been added. This currently works only
 with FreeRDP based servers.
     - Most notably there is now support for [MS-RDPEWA] (FIDO2
 redirection)
     - Android client received a (small) facelift
     - Improved SDL3 client drawing performance
     - Console output support for SDL3 (windows) and windows native client
     - RDP proxy now supports NSCodec and RFX modes.
     - RDP PRoxy now has smartcard emulation and SAM file support (via
 config file)
     - Smartcard KSP support for NLA authentication

 CVE fixes
     - CVE-2026-40254

 What's Changed
     - [winpr,wlog] add WLog_SetGlobalPrefix (#12497)
     - [channels,video] fix wrong cast (#12511)
     - [codec,openh264] reject encoder ABI mismatch on runtime-loaded
 library (#12510)
     - [client,sdl] create a copy of rdpPointer (#12512)
     - [codec,video] properly pass intermediate format (#12518)
     - [utils, signal] lazily initialize Windows CRITICAL_SECTION to match
 POSIX static mutex behavior (#12520)
     - winpr: improve libunwind backtraces (#12530)
     - [server,shadow] remember selected caps (#12528)
     - Zero credential data before free in NLA and NTLM context (#12532)
     - [server,proxy] ignore missing client in input channel (#12536)
     - [server,proxy] ignore rdpdr messages (#12537)
     - [winpr,sspi] improve kerberos logging (#12538)
     - Codec fixes (#12542)
     - [winpr,sspi] Fix context nullptr handling (#12543)
     - Dev 3.24.3 dev0 (#12545)
     - Fix memory leak in gdi_create_bitmap() on gdi_CreateBitmap failure
 (libfreerdp/gdi/graphics.c) (#12547)
     - Fix memory leak in vgids_read_do_fkt() on Stream_New failure
 (libfreerdp/emu/scard/smartcard_virtual_gids.c) (#12548)
     - Proxy config improve (#12549)
     - Proxy config improve (#12550)
     - [client,sdl] clamp cursor hotspot (#12553)
     - RFC: Research/av1 codec extension (#12527)
     - [winpr,kerberos] fix krb_log_context_encryption (#12555)
     - [client,sdl] fix global init return check (#12558)
     - Fix remote credential with windows11h2 (#12560)
     - Proxy scard auth improvements (#12561)
     - [winpr,sspi] guard krb5_get_etype_info (#12562)
     - [utils,smartcard] fix STATUS_BUFFER_TOO_SMALL (#12564)
     - [client,common] do not manipulate security settings for smartcard-
 logon (#12567)
     - [channels,audin] fix regression for microphone (#12570)
     - [client,sdl] add SDL_KMOD_MODE and SDL_KMOD_LEVEL5 (#12569)
     - Fix unbound strlen on slotDescription (#12571)
     - build: Update FindFFmpeg.cmake to support Apple frameworks with
 'lib' prefix (#12565)
     - [channels,rdpewa] add WebAuthn virtual channel support (#12572)
     - [core] fix freerdp_get_nla_sspi_error always returning 0 on client
 (#12574)
     - [ci] enable rdpewa channel (#12576)
     - small refactoring (#12578)
     - Rdpewa unify notifications (#12581)
     - [client,sdl] fix crash when clicking 'cancel' on PIN popup (#12580)
     - [channels,drive] refine bounds checks (#12584)
     - fix: smartcard logon with ECC keys and minidriver-assigned container
 names (#12585)
     - Various papercuts (#12583)
     - fix: console output on Windows client (#12573)
     - [winpr,crt] dump stack on aligned memory errors (#12588)
     - [client,x11] keep scancode input for Ctrl/Alt/Super combinations in
 /kbd:unicode mode (#12590)
     - [codec,progressive] fix underflow guard in progressive_rfx_quant_sub
 (#12592)
     - fix: wfreerdp floatbar visibility (#12594)
     - [winpr,json] return a copy from WINPR_JSON_Print* (#12595)
     - [client,sdl] drop WITH_DEBUG_SDL_EVENTS (#12599)
     - Ncrypt and asn1 cleanup (#12604)
     - Video channel fix (#12593)
     - [codec,h264] fix media foundation backend (#12606)
     - fix(sdl): detect Hyprland and river in tryFallback() (#12608)
     - Proxy stress fixes (#12597)
     - Add new fuzzer tests (#12613)
     - fix(sdl): use SDL_Renderer instead of software surfaces (#12607)
     - fix(sdl): BFS neighbor walk pop/begin mismatch in addOrUpdateDisplay
 (#12614)
     - fix(sdl): promote first monitor as primary when subset excludes
 primary (#12618)
     - [ci,android] default to only aarch64 (#12622)
     - Fix process exit code on non-pidfd platforms (macOS, BSD)#12534)
 (#12586)
     - warning cleanups (#12626)
     - fix: prevent PostQuitMessage in RemoteApp WM_DESTROY handler
 (#12629)
     - [winpr,ntlm] fix message cleanup across the SSPI lifecycle (#12609)
     - Code bug fixes (#12632)
     - Oss fixes (#12633)
     - [client,android] add an option to enable keeping screen on when
 connected (#12630)
     - [client, android] Fix layout overlaps, migrate to AndroidX, and
 update UI components (#12628)
     - Proxy config tests (#12636)
     - Proxy config optional targethost (#12637)
     - [client,sdl] set SDL_HINT_SCREENSAVER_INHIBIT_ACTIVITY_NAME (#12639)
     - Nightly deb fix (#12640, #12641, #12649, #12650, #12642, #12643)
     - [winpr,input] fix korean keyboard mapping (#12646)
     - [client,sdl] set hints before SDL_Init (#12644)
     - Sdl inhibit option (#12647)
     - [client,X11] fix residual race in xf_clipboard_formats_free (#12648)
     - (sdl3): Fix oversized window on HiDPI Wayland (#12635)
     - [cache,bitmap] fix off-by-one in bitmap_cache_put bounds check
 (#12651)
     - [winpr,sspi] free fields buffer immediately (#12654)
     - [codec,dsp] fix fencepost error in dsp_ima_clamp_step (#12655)
 }}}
 Fixed at 634ea820f5. Leaving open for SA.
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23188#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.