xrdp v0.9.19 #2178

metalefty · 2022-03-17T06:50:37Z

metalefty
Mar 17, 2022
Maintainer

Running xrdp and xrdp-sesman on separate hosts is still supported by this release, but is now deprecated. This is not secure. A future release will replace the TCP socket used between these processes with a Unix Domain Socket, and then cross-host running will not be possible.

Both inbound and outbound clipboards can now be restricted for text, files or images [Sponsored by @CyberTrust @clear-code and @kenhys] (RFX : Support large screens #2087)

CVE-2022-23613: Privilege escalation on xrdp-sesman (This fix is also in the out-of-band v0.9.18.1 release)
The versions of imlib2 used on RHEL 7 and 8 are now detected correctly (Support imlib2 on RHEL 7 #2118)
Some situations where zombie processes could exist have been resolved (Fixed possible SIGCHILD signal lost #2146, Fixed possible infinite loop #2151, Fix sesman signal processing #2168)
Some null-pointer exceptions which can happen in the logging module have been addressed (Fix NPEs in log.c #2149)
Some minor logging errors have been corrected (Minor logging fixes in xrdp_iso.c #2152)
The signal handling in sesman has been reworked to prevent race conditions when a child exits. This has also made it possible to reliably reload the sesman configuration with SIGHUP (session end code is not signal-safe #1729, Fix sesman signal processing #2168)

Versions 0.13 and later of checklib can undefine the pre-processor symbol HAVE_STDINT_H. The xrdp tests now build successfully against these versions (Fix problems with check 0.15.2 (F36) #2124)
OpenSSL packaging changes (OpenSSL3 fixes #2130):-
- The OpenSSL 3 EVP interface is now fully supported
- When building against OpenSSL 3, an internal implementation of the RC4 cipher is used instead of the implementation from the OpenSSL legacy provider
- The wrapping of the OpenSSL library has been improved which should make it simpler to provide an alternative cryptographic provider in the future, if required
- The logging of TLS/non-TLS security negotiation has been improved
cppcheck version used for CI bumped to 2.7 (Move to cppcheck 2.7 and bump default threads to 2 #2140)
The s_check() macro which is easily mis-used has been removed (Remove s_check() macro #2144)
Status values for the DRDYNVC channel are now available in libxrdp/xrdp_channel.h

On OpenSSL 3 systems, there is now no need to build with the -Wno-error=deprecated-declarations flag

On-the-fly resolution change requires the Microsoft Store version of Remote Desktop client but sometimes crashes on connect (Microsoft Remote Desktop sometimes crashes on connect #1869)
xrdp's login dialog is not relocated at the center of the new resolution after on-the-fly resolution change happens (Login dialog should be redrawn at the center of new resolution after on-the-fly resizing happened #1867)

This discussion was created from the release xrdp v0.9.19.