Release of FreeRDP 2.0, an open-source implementation of the RDP protocol

After seven years of development the project release FreeRDP 2.0, offering an open-source implementation of the Remote Desktop Protocol RDP (Remote Desktop Protocol), developed based on specifications Microsoft. The project provides a library for integrating RDP support into third-party applications and a client that can be used for remote connections to Windows desktops. The project code is distributed under the Apache 2.0 license.

The last stable release of the project was is formed in January 2013, and testing of the 2.0 branch began in 2007. To avoid delays in development, future releases will follow a
rolling model, implying the annual formation of a significant release after the stabilization of the master branch and periodic publication of corrective updates. Significant releases will be supported for two years — one year for bug fixes and another year solely for vulnerability remediation.

Key changes:

• Added the ability to work as a transit RDP proxy;
• Added support for the MS-RA 2 (Remote Assistance Protocol);
• Refactored code related to smart card support. Previously missing functionality has been added, and input validation has been strengthened;
• Added the '/cert' option, which consolidates the functionality previously provided by separate options for handling certificates (cert-ignore, cert-deny, cert-name, cert-tofu);
• Discontinued the client based on DirectFB, which has been left unsupported;
• Font smoothing is enabled by default;
• Added support for the Flatpak self-contained package system;
• For Wayland-based systems, a smart scaling mode has been implemented using libcairo;
• Introduced an API for image scaling during programmatic rendering;
• The implementation of the RAIL (Remote Applications Integrated Locally) component, which allows for remote access to individual windows and notification indicators, has been updated to specification 28.0;
• During operation, the server's support for H.264 format streaming is determined;
• In the '/gfx' and '/gfx-h264' commands, the option 'mask=' has been added;
• The source texts have been reformatted;
• Added the '/timeout' option for configuring the TCP ACK packet wait timeout;
• Vulnerabilities CVE-2020-11521, CVE-2020-11522, CVE-2020-11523, CVE-2020-11524, CVE-2020-11525, CVE-2020-11526 addressed, among which are present. problems leading to memory writes outside the allocated buffer when processing incoming external data. Additionally, 9 more vulnerabilities without CVEs were fixed, primarily caused by reading from memory areas outside the allocated buffer.

Source: opennet.ru