Ukukhishwa kushicilelwe I-FreeRDP 3.27.0 — ukusetshenziswa komthombo ovulekile we-Remote Desktop Protocol, okuhlanganisa imitapo yolwazi kanye namakhasimende okuxhuma kumaseva e-RDP. Ukukhishwa kwashicilelwa ngoJuni 15, 2026, njengoba kubikiwe ku inothi lephrojekthi elisemthethweniIzingobo zomlando zenguqulo entsha zilayishiwe ku- Ikhathalogi yokukhishwa kwe-FreeRDP, futhi isethi ephelele yezinguquko iyatholakala nge ukuqhathanisa 3.26.0…3.27.0 ku-GitHub.
Abathuthukisi babiza i-FreeRDP 3.27.0 ngokuthi ukukhishwa okukhulu okunezici ezintsha, ukulungiswa kwamaphutha, kanye nokuhlanzwa kwekhodi. Enye yezinguquko ezinkulu izilungiselelo ze-TLS eziqinile: izinga lokuphepha le-TLS manje lisethwe ku-2 ngokuzenzakalelayo, futhi inguqulo ye-TLS esekelwayo ephansi inyuselwe ku- I-TLS 1.2Lokhu kusho ukuthi ukucushwa kwe-TLS okudala nokubuthakathaka ngeke kusasetshenziswa ngokuzenzakalelayo. Uma kudingeka, lokhu kuziphatha kungashintshwa ohlangothini lweklayenti nge-/tls:seclevel: kanye ne-/tls:enforce: amapharamitha, futhi ukusetshenziswa kweseva kungalawula lokhu nge-rdpSettings::FreeRDP_TLSMinVersion kanye ne-rdpSettings::FreeRDP_TlsSecLevel, njengoba kuchaziwe ku- Amanothi okukhishwa e-FreeRDP 3.27.0.
Izinguquko ezibalulekile ku-FreeRDP 3.27.0:
I-TLS isibe lukhuni ngokuzenzakalelayo.
Ku-FreeRDP 3.27.0, izinga lokuphepha le-TLS elizenzakalelayo manje lingu-2, kanti inguqulo yephrothokholi encane yi-TLS 1.2. Lokhu kuthuthukisa ukuphepha okuyisisekelo kokuxhumeka kwe-RDP futhi kunciphisa ingozi yokusebenzisa amapharamitha e-cryptographic aphelelwe yisikhathi. Ukuze kuhambisane namaseva amadala, izilungiselelo zeklayenti ezicacile /tls:seclevel: kanye ne- /tls:enforce: zigciniwe.Ukusekelwa okuthuthukisiwe kwe-Azure/Entra.
Ukukhishwa kwenezela izandiso ukuze kuthuthukiswe ukuzinza kokuxhumeka kwe-Azure/Entra. Abathuthukisi bacacisa ukuthi lezi zandiso ezaziwayo kodwa azibhalwanga ngokusemthethweni. Empeleni, lokhu kufanele kuthuthukise ukusebenza kwe-FreeRDP ezimweni zebhizinisi lapho ukufinyelela kwe-RDP kuxhumene nengqalasizinda ye-Microsoft Entra ID.Isibuyekezo esikhulu Android-iklayenti.
AndroidIklayenti lithole olunye ushintsho olubalulekile. Inothi lokukhishwa alinikezi uhlu olunemininingwane, kodwa abathuthukisi bangathanda ukubonga u-@svncibrahim ngegalelo lakhe. Lokhu kuqhubeka nomkhuba wokukhishwa kwangaphambilini, lapho iklayenti leselula le-FreeRDP lathuthukiswa kakhulu.Kushintshwe umsebenzi one-hash yephasiwedi waba yi-non-Windows-izinhlelo.
I-hash yephasiwedi manje isebenzisa isici se-SSPI esenziwe ngokwezifiso ezinhlelweni ezingezona ze-Windows WindowsLolu ushintsho oluphansi endleleni yokuqinisekisa kanye nokuhlanganiswa ne-logic ehambisana ne-SSPI, okubaluleke kakhulu kubathuthukisi kanye nabahlanganisi abasebenzisa i-FreeRDP njengelabhulali.I-API yommeleli we-RDP yomphakathi elungisiwe.
Izakhiwo ezingazinzile zisusiwe kuma-header omphakathi e-proxy e-RDP. Ababhali baphawula ukuthi abekho abasebenzisi abaziwayo bale API yangaphakathi, kodwa noma ubani othembele kuyo ngqo kufanele axhumane nabathuthukisi. Lolu shintsho luhloselwe ukuhlanza i-API nokunciphisa ingozi yokuthi ikhodi yangaphandle ithembele ngephutha ezakhiweni zangaphakathi ezingazinzile.Ukuhlelwa kwekhibhodi okuthuthukisiwe.
I-changelog ifaka ukulungiswa kwemephu yekhibhodi. Izinguquko ezinjalo zivame ukuba ezibalulekile ekudlulisweni okufanele kwezakhiwo zasendaweni kanye nezinkinobho ezikhethekile kuseshini ekude, ikakhulukazi uma kuxhuma kusuka Linux-amaklayenti ku Windows-amaseva noma izindawo ze-RDP ezingezona ezejwayelekile.Isiteshi se-RDPDR sandisiwe.
Isiteshi I-RDPDRIndlela yokuqondisa kabusha idivayisi manje ingathola izimpikiswano ezengeziwe. Abathuthukisi bagcizelela ukuthi lokhu akuphuli ukuziphatha okukhona, kodwa kunalokho kuvumela iziteshi ezisekela uhlelo olusha ukuthi zicele amapharamitha engeziwe futhi ziqhubeke nokuzisebenzisa.I-API yezibalo zeklayenti engeziwe.
I-FreeRDP manje ine-API yokurekhoda izibalo zamaklayenti. Ngokuzenzakalelayo, iphrinta ilogi yokulandelela ekupheleni kweseshini, kodwa idatha ingacelwa nganoma yisiphi isikhathi ngesikhathi sokuxhumeka. Lokhu kuwusizo ekuxilongweni, ukuqapha ikhwalithi yokuxhumeka kwe-RDP, kanye nokulungisa amaphutha amaklayenti akhiwe phezu kwe-libfreerdp.Ukuphathwa okuthuthukisiwe kwezimpawu ze-WinPR ezindala.
Lokhu kukhishwa kulungisa ukuphathwa kwezindlela ze-WinPR ezingasasebenzi futhi kwenezela inketho ethi WITHOUT_WINPR_3x_DEPRECATED, evumela i-FreeRDP ukuthi yakhiwe ngaphandle kwezimpawu ezingasasebenzi egatsheni elizinzile le-3.x. Lokhu kubalulekile kubanakekeli bokusabalalisa kanye nabathuthukisi abafuna ukulungiselela ukuhlanzwa kwe-API kwesikhathi esizayo.Ubuthakathaka bulungisiwe.
Izeluleko Zokuphepha ze-GitHub ezinhlanu zanyatheliswa kanye ne-FreeRDP 3.27.0. Phakathi kwazo kukhona i-heap-buffer-overflow ekuhlanganisweni kabusha kwe-TS Gateway RPC RESPONSE ngenxa yokungavumelani kwe-alloc_hint kanye nosayizi wedatha wangempela, omiswe ku-3.27.0 (I-GHSA-9gxm-3mf5-f5cx); i-heap-buffer-overflow ku-TS Gateway RPC fragment ithola ukucutshungulwa ngenxa yomkhawulo ongalungile we-bind_ack max_xmit_frag (I-GHSA-7rp4-66mc-j9vx); okungaphandle kwemingcele kufundwa ekuguqulweni kwe-H.264 YUV-to-RGB lapho ubukhulu be-decoder kanye nobukhulu bomphezulu bungahambisani (I-GHSA-3mmf-qh4f-frm6); i-heap-buffer-overflow bhala ku-AVC444 YUV buffer allocation (I-GHSA-vx73-w5q6-7jqr); kanye nenani eliphelele lichichima ku-freerdp_image_copy_from_icon_data() (GHSA-5c5v-f78v-h2f6Ezinye zezinkinga zithinta amaklayenti lapho exhuma kuseva noma isango le-RDP elinonya, ngakho-ke isibuyekezo sibaluleke kakhulu kubasebenzisi abaxhuma kuma-host e-RDP angaphandle noma angathembekile.Abahlanganyeli abasha bephrojekthi.
Lokhu kukhishwa kufaka ababhali abasha: @ramnes, @grioghar, @scottgeigel2, @metsw24-max, kanye no-@zorjen122. Lokhu kubalulekile kuphrojekthi yengqalasizinda efana ne-FreeRDP: ayisetshenziswa nje kuphela njengeklayenti elizimele kodwa futhi nanjengomtapo wezincwadi kwezinye izixazululo zokufinyelela kude.
Sekukonke, i-FreeRDP 3.27.0 ayibukeki njengokukhishwa kokulungiswa kwamaphutha okuhle, kodwa isibuyekezo esisebenzayo sabaphathi, abathuthukisi bamakhasimende, kanye nabasebenzisi be-RDP. Linux, i-BSD, macOS, Android kanye namanye amapulatifomu. Izizathu eziyinhloko zokuthuthukisa izilungiselelo ezizenzakalelayo ze-TLS eziqinile, ukuhambisana okuthuthukisiwe ne-Azure/Entra, kanye nezibuyekezo. Android-iklayenti kanye nokulungiswa kobuthakathaka obuthinta uhlangothi lweklayenti lokuxhumana kwe-RDP.
Source: linux.org.ru
