• 🔧 Platforms, build and packaging:
  • pynvml 13.610.43
  • pytools 2026.1.1
  • torch-vision 0.27.1
  • torch 2.12.1
  • cython 3.2.8
  • cython 3.3 build warnings: use stricter types
• Security:
  • RCE: URL parsing subversion
  • don't download to $HOME as fallback
  • never download to a dot file
  • restrict which types of URLs can be opened
  • verify download path stays within the download directory
  • ensure auto-accepted file download matches the request
  • harden requested file response validation
  • only load pillow if needed
  • ensure that the server only uses one of the allowed encodings
  • no longer enable control channel on clients by default
  • validate untrusted mDNS record fields before building connection URIs
• Major:
  • xpra info fails to connect + better limit
  • ssh connection failures, launcher also fails
  • html5 client clipboard is disabled
  • cairo backend fails to paint in 30 bit per pixel mode
• Minor:
  • gsettings lookup always failed in desktop servers
  • ssh proxied connections used the wrong config
  • error handling in fdproxy
  • encode client fails to use mmap transfers
  • keyboard errors with X11 servers missing the Xkb extension
  • internal errors updating av-sync delay
  • mmap write errors should fall through
  • safer network capability parsing
  • don't send raw xpm icons
  • workarea calculations could fail
  • experimental client backends failed to use jpeg
  • monitor mode is desktop-like for clients
• 📁 File-transfers:
  • better parsing compatibility
  • legacy packet names, preserve printer and title, etc
  • tighten file transfer authorization
  • reject malformed file transfer input
• 🌈 Encodings:
  • buffer overflow in fallback Cython CSC module
  • codec module availability detection
  • avif can be used for lossless and grayscale
• 💄 Cosmetic:
  • no need to try to use invalid displayfd values
  • socket directory double-quoted in runner script
  • message shows incorrect mmap limit
  • logging error when notification icon parsing fails
  • notification theme icon default size + fixup test
  • remove legacy unused file
  • remove bogus statements
  • match method signature
  • planar data debug logging errors
  • remove duplicated keys, add missing one
  • incorrect metadata used for debug logging
  • webcam handshake function