• Platforms, build and packaging:
  • honour pkgconfig file for Gtk build paths + fixup
  • MSWindows clients unstable resizing of headerbar windows
  • MS Windows builds should install the qrencode library
  • don't rely on CPython import side-effects
  • remove Ubuntu Plucky, add Ubuntu Resolute
  • update active Fedora releases
  • macOS packaging update for newer GStreamer versions, newer python-zeroconf
  • macOS source files missing from source distribution
  • GLibUnix warnings on macOS
  • RHEL 10 packaging for libyuv
  • openh264 RPM packaging conflicts
  • pynvml 13.610.43
• Security:
  • RCE: URL parsing subversion
  • don't download to $HOME as fallback
  • no longer enable control channel on clients by default
  • tighten file transfer authorization
  • reject malformed file transfer input
  • never download to a dot file
  • verify download path stays within the download directory
  • restrict which types of URLs can be opened
  • bind requested-file auto-accept to a client-generated send-id
  • ensure file-transfer error handlers clean up properly
• Major:
  • pinentry error handling fails to parse output, fail faster
  • use a clean environment for launching clients from the session GUI
  • do skip query string overrides, as we claim to do
  • RandR parsing error on cloned outputs
  • cairo backend fails to paint in 30 bit per pixel mode
• Minor:
  • openh264 codecs could crash
  • window size-constraints not honoured with OpenGL backend
  • broken screenshot subcommand with shadow servers
  • fail fast
  • Gtk fails to guess the backend to use for the splash screen
  • headerbar windows missing a title
  • failure to stop a proxy instance should not propagate
  • proxy deadlocks
  • "raise windows" tray menu entry nonfunctional
  • ensure cleanup methods are always called from the correct context
  • socket directory double-quoted in runner script
  • no need to try to use invalid displayfd values
  • ssh proxied connections used the wrong config
  • keyboard errors with X11 servers missing the Xkb extension
  • workarea calculations could fail
  • monitor mode is desktop-like for clients
• Network:
  • closed connections can shortcut out
  • incomplete thread cleanup
  • infinite socket path recursion
  • reject more unexpected / tricky SSH agent socket paths
  • allow more time for SSH connections to reach the connected state
  • honour the timeout provided
  • named-pipe fixes and thorough tests + fixup
• SSL:
  • SSL session ticket caused connection errors + fixup
  • make test more resilient
  • early handshake
• Keyboard:
  • handle lack of keymap more gracefully
• Cosmetic:
  • theoretically unsafe path evaluation
  • more helpful message for incomplete installation issues
  • server logs errors when processing info requests
  • return correct type
  • headerbar enum warnings
  • redundant / confusing statement
  • monitor mode should get the same warnings as desktop
  • key event logging could mess up the log output
  • nested dictionary formatting
  • static gravity warning is obsolete
  • hide bandwidth menu when the feature is not available
  • message shows incorrect mmap limit
  • remove legacy unused file
  • remove bogus statements