- Platforms, build and packaging:
- honour pkgconfig file for Gtk build paths + fixup
- MSWindows clients unstable resizing of headerbar windows
- MS Windows builds should install the qrencode library
- don't rely on CPython import side-effects
- remove Ubuntu Plucky, add Ubuntu Resolute
- update active Fedora releases
- macOS packaging update for newer GStreamer versions, newer python-zeroconf
- macOS source files missing from source distribution
GLibUnixwarnings on macOS- RHEL 10 packaging for libyuv
- openh264 RPM packaging conflicts
pynvml 13.610.43
- Security:
- RCE: URL parsing subversion
- don't download to
$HOMEas fallback - no longer enable control channel on clients by default
- tighten file transfer authorization
- reject malformed file transfer input
- never download to a dot file
- verify download path stays within the download directory
- restrict which types of URLs can be opened
- bind requested-file auto-accept to a client-generated send-id
- ensure file-transfer error handlers clean up properly
- Major:
- Minor:
- openh264 codecs could crash
- window size-constraints not honoured with OpenGL backend
- broken screenshot subcommand with shadow servers
- fail fast
- Gtk fails to guess the backend to use for the splash screen
- headerbar windows missing a title
- failure to stop a proxy instance should not propagate
- proxy deadlocks
- "raise windows" tray menu entry nonfunctional
- ensure cleanup methods are always called from the correct context
- socket directory double-quoted in runner script
- no need to try to use invalid displayfd values
- ssh proxied connections used the wrong config
- keyboard errors with X11 servers missing the Xkb extension
- workarea calculations could fail
monitormode is desktop-like for clients
- Network:
- SSL:
- Keyboard:
- Cosmetic:
- theoretically unsafe path evaluation
- more helpful message for incomplete installation issues
- server logs errors when processing info requests
- return correct type
- headerbar enum warnings
- redundant / confusing statement
monitormode should get the same warnings asdesktop- key event logging could mess up the log output
- nested dictionary formatting
- static gravity warning is obsolete
- hide bandwidth menu when the feature is not available
- message shows incorrect mmap limit
- remove legacy unused file
- remove bogus statements