Kuburitswa kweFreeRDP 2.0, kuita kwemahara kweiyo RDP protocol

Mushure memakore manomwe ebudiriro zvakaitika kuburitswa kweprojekiti YemaharaRDP 2.0, iyo inopa kushandiswa kwemahara kweiyo kure kure desktop yekuwana protocol RDP (Remote Desktop Protocol), yakagadzirwa zvichibva pane specifications Microsoft. Iyo purojekiti inopa raibhurari yekubatanidza RDP rutsigiro mune yechitatu-bato zvikumbiro uye mutengi anogona kushandiswa kure kure kubatana neWindows desktop. Project code inoparadzirwa ne ine rezinesi pasi peApache 2.0.

Kuburitswa kwakagadzikana kwekupedzisira kweprojekiti kwaive akaumbwa muna January 2013, uye kuedzwa kwebazi re2.0 kwakatanga muna 2007. Kuti urege kunonoka kusimudzira mune ramangwana, zvinotevera zvinoburitswa zvinogadzirwa mukati mehurongwa
rolling model, iyo inoreva kuumbwa kwegore negore kwekusunungurwa kwakakosha mushure mekugadzikana kwebazi guru uye nguva nenguva kubudiswa kwekugadzirisa zvigadziridzo. Kuburitswa kukuru kunotsigirwa kwemakore maviri - gore rimwe rekugadzirisa bug uye rimwe gore rekugadzirisa kusasimba chete.

chikuru change:

• Yakawedzera kugona kushanda seyekufambisa RDP proxy;
• Yakawedzerwa rutsigiro rweMS-RA 2 (Remote Assistance Protocol);
• Kodhi ine chekuita nesmart card rutsigiro yakagadziridzwa zvakare. Yakawedzerwa yaimboshaika kushanda uye yakasimbisa yekuisa data kusimbiswa;
• Yakawedzera iyo "/ cert" sarudzo, iyo inobatanidza kushanda kwakambopihwa neakasiyana sarudzo dzekugadzirisa zvitupa (cert-ignore, cert-deny, cert-zita, cert-tofu);
• Kuendeswa kwemutengi kwakavakirwa paDirectFB, iyo yakasara isina kutsigirwa, yakamiswa;
• Font smoothing inogoneswa nekusarudzika;
• Yakawedzerwa rutsigiro rweFlatpack system yemapakeji ega;
• Kune Wayland-based masisitimu, yakangwara yekuyera modhi yakashandiswa uchishandisa libcairo;
• Yakaunza API yekuyera mifananidzo paunenge uchipa software;
• Kuitwa kweRAIL (Remote Applications Integrated Locally) chikamu, iyo inobvumira kusvika kure kune imwe neimwe mahwindo uye zviratidzo zvekuzivisa, yakagadziridzwa kune tsanangudzo 28.0;
• Panguva yekushanda, inovimbiswa kuti sevha inotsigira kutepfenyura muH.264 format;
• Yakawedzera "mask=" sarudzo ku "/ gfx" uye "/ gfx-h264" mirairo ";
• Zvinyorwa zvekwakabva zvakagadziridzwa;
• Yakawedzerwa sarudzo "/ timeout" kugadzirisa nguva yekumirira yekumirira TCP ACK mapaketi;
• Kusagadzikana CVE-2020-11521, CVE-2020-11522, CVE-2020-11523, CVE-2020-11524, CVE-2020-11525, CVE-2020-11526 zvakagadziriswa, kusanganisira pane matambudziko anotungamira pakunyorera kunzvimbo yekurangarira kunze kweiyo buffer yakagoverwa paunenge uchigadzira data rinobva kunze. Uye zvakare, 9 kumwe kusasimba pasina CVE kwakagadziriswa, kunyanya zvakakonzera kuverenga kubva munzvimbo dzekuyeuka kunze kwebhafa yakagoverwa.

Source: opennet.ru