| Newsgroups |
gmane.linux.lfs.beyond.book |
| Message-ID |
<[email protected]> |
#23188: FreeRDP-3.25.0
-------------------------+-------------------------------
Reporter: Bruce Dubbs | Owner: SecurityAdvisory
Type: enhancement | Status: new
Priority: normal | Milestone: 13.1
Component: BOOK | Version: git
Severity: normal | Resolution:
Keywords: |
-------------------------+-------------------------------
Changes (by Joe Locash):
* owner: Joe Locash => SecurityAdvisory
* status: assigned => new
Comment:
{{{
2026-04-23 Version 3.25.0
Bugfix and feature release.
- Experimental AV1 support has been added. This currently works only
with FreeRDP based servers.
- Most notably there is now support for [MS-RDPEWA] (FIDO2
redirection)
- Android client received a (small) facelift
- Improved SDL3 client drawing performance
- Console output support for SDL3 (windows) and windows native client
- RDP proxy now supports NSCodec and RFX modes.
- RDP PRoxy now has smartcard emulation and SAM file support (via
config file)
- Smartcard KSP support for NLA authentication
CVE fixes
- CVE-2026-40254
What's Changed
- [winpr,wlog] add WLog_SetGlobalPrefix (#12497)
- [channels,video] fix wrong cast (#12511)
- [codec,openh264] reject encoder ABI mismatch on runtime-loaded
library (#12510)
- [client,sdl] create a copy of rdpPointer (#12512)
- [codec,video] properly pass intermediate format (#12518)
- [utils, signal] lazily initialize Windows CRITICAL_SECTION to match
POSIX static mutex behavior (#12520)
- winpr: improve libunwind backtraces (#12530)
- [server,shadow] remember selected caps (#12528)
- Zero credential data before free in NLA and NTLM context (#12532)
- [server,proxy] ignore missing client in input channel (#12536)
- [server,proxy] ignore rdpdr messages (#12537)
- [winpr,sspi] improve kerberos logging (#12538)
- Codec fixes (#12542)
- [winpr,sspi] Fix context nullptr handling (#12543)
- Dev 3.24.3 dev0 (#12545)
- Fix memory leak in gdi_create_bitmap() on gdi_CreateBitmap failure
(libfreerdp/gdi/graphics.c) (#12547)
- Fix memory leak in vgids_read_do_fkt() on Stream_New failure
(libfreerdp/emu/scard/smartcard_virtual_gids.c) (#12548)
- Proxy config improve (#12549)
- Proxy config improve (#12550)
- [client,sdl] clamp cursor hotspot (#12553)
- RFC: Research/av1 codec extension (#12527)
- [winpr,kerberos] fix krb_log_context_encryption (#12555)
- [client,sdl] fix global init return check (#12558)
- Fix remote credential with windows11h2 (#12560)
- Proxy scard auth improvements (#12561)
- [winpr,sspi] guard krb5_get_etype_info (#12562)
- [utils,smartcard] fix STATUS_BUFFER_TOO_SMALL (#12564)
- [client,common] do not manipulate security settings for smartcard-
logon (#12567)
- [channels,audin] fix regression for microphone (#12570)
- [client,sdl] add SDL_KMOD_MODE and SDL_KMOD_LEVEL5 (#12569)
- Fix unbound strlen on slotDescription (#12571)
- build: Update FindFFmpeg.cmake to support Apple frameworks with
'lib' prefix (#12565)
- [channels,rdpewa] add WebAuthn virtual channel support (#12572)
- [core] fix freerdp_get_nla_sspi_error always returning 0 on client
(#12574)
- [ci] enable rdpewa channel (#12576)
- small refactoring (#12578)
- Rdpewa unify notifications (#12581)
- [client,sdl] fix crash when clicking 'cancel' on PIN popup (#12580)
- [channels,drive] refine bounds checks (#12584)
- fix: smartcard logon with ECC keys and minidriver-assigned container
names (#12585)
- Various papercuts (#12583)
- fix: console output on Windows client (#12573)
- [winpr,crt] dump stack on aligned memory errors (#12588)
- [client,x11] keep scancode input for Ctrl/Alt/Super combinations in
/kbd:unicode mode (#12590)
- [codec,progressive] fix underflow guard in progressive_rfx_quant_sub
(#12592)
- fix: wfreerdp floatbar visibility (#12594)
- [winpr,json] return a copy from WINPR_JSON_Print* (#12595)
- [client,sdl] drop WITH_DEBUG_SDL_EVENTS (#12599)
- Ncrypt and asn1 cleanup (#12604)
- Video channel fix (#12593)
- [codec,h264] fix media foundation backend (#12606)
- fix(sdl): detect Hyprland and river in tryFallback() (#12608)
- Proxy stress fixes (#12597)
- Add new fuzzer tests (#12613)
- fix(sdl): use SDL_Renderer instead of software surfaces (#12607)
- fix(sdl): BFS neighbor walk pop/begin mismatch in addOrUpdateDisplay
(#12614)
- fix(sdl): promote first monitor as primary when subset excludes
primary (#12618)
- [ci,android] default to only aarch64 (#12622)
- Fix process exit code on non-pidfd platforms (macOS, BSD)#12534)
(#12586)
- warning cleanups (#12626)
- fix: prevent PostQuitMessage in RemoteApp WM_DESTROY handler
(#12629)
- [winpr,ntlm] fix message cleanup across the SSPI lifecycle (#12609)
- Code bug fixes (#12632)
- Oss fixes (#12633)
- [client,android] add an option to enable keeping screen on when
connected (#12630)
- [client, android] Fix layout overlaps, migrate to AndroidX, and
update UI components (#12628)
- Proxy config tests (#12636)
- Proxy config optional targethost (#12637)
- [client,sdl] set SDL_HINT_SCREENSAVER_INHIBIT_ACTIVITY_NAME (#12639)
- Nightly deb fix (#12640, #12641, #12649, #12650, #12642, #12643)
- [winpr,input] fix korean keyboard mapping (#12646)
- [client,sdl] set hints before SDL_Init (#12644)
- Sdl inhibit option (#12647)
- [client,X11] fix residual race in xf_clipboard_formats_free (#12648)
- (sdl3): Fix oversized window on HiDPI Wayland (#12635)
- [cache,bitmap] fix off-by-one in bitmap_cache_put bounds check
(#12651)
- [winpr,sspi] free fields buffer immediately (#12654)
- [codec,dsp] fix fencepost error in dsp_ima_clamp_step (#12655)
}}}
Fixed at 634ea820f5. Leaving open for SA.
--
Ticket URL: <https://wiki.linuxfromscratch.org/blfs/ticket/23188#comment:2>
BLFS Trac <https://wiki.linuxfromscratch.org/blfs/>
Beyond Linux From Scratch
--
http://lists.linuxfromscratch.org/sympa/info/blfs-book
Unsubscribe: See the above information page