=============================
ThinLinc 4.13.0 Release Notes
=============================

Introduction
============

Cendio are proud to present ThinLinc 4.13.0, with more than 120
enhancements and fixes. The most prominent changes are:

* The ThinLinc server has been updated to use Python 3 and GTK+ 3 in
  order to be more compatible with the latest distributions and with
  future distributions. Distributions where Python 3 is not available
  are no longer supported by this or future versions of ThinLinc.

* ThinLinc 4.12.0 unfortunately introduced a security regression where
  malicious users on a ThinLinc agent could cause other user's sessions
  to freeze and lock up. This regression has been fixed in this version
  of ThinLinc and all users currently using ThinLinc 4.12.0 or later are
  recommended to upgrade as soon as is possible.

* Some stability issues with Kerberos on Windows have been fixed and the
  ThinLinc client should now work reliably with Kerberos on all
  platforms.

ThinLinc works on most modern Linux distributions and is supported on
any platform that fulfills our documented requirements.

Changes in This Release
=======================

In the list below, the bug number is given in parentheses. For more
information, visit https://www.cendio.com/bugzilla/.

Server
------

* The ThinLinc server now requires Python 3.4 or newer instead of
  Python 2.6. (4586)

* The ThinLinc server now requires PyGObject and GTK+ 3.20 or newer
  instead of PyGTK 2.16.0. (7508)

* Fixed an issue in ThinLinc 4.12.0 and later where other local users
  could cause a user's session to freeze by sending invalid data on the
  session's VNC port. (7706)

* Fixed an issue in ThinLinc 4.12.0 and later where trying to paste the
  clipboard to replace selected text would sometimes fail. (7712)

* Fixed an issue where the master or agent could crash and shut down if
  the system was under excessive load. (7689)

* The command tl-passwd is no longer included with ThinLinc. (7696)

* Fixed an issue where it was not possible to install ThinLinc or to run
  ThinLinc Setup on an apt system where python-apt wasn't available,
  such as on Ubuntu 20.10. (7671)

* Fixed an issue where ThinLinc Setup could log many lines with "Unknown
  transaction item" when used on a system with DNF. (7714)

* Fixed an issue where ThinLinc Setup would incorrectly detect support
  for NFS even when it was not supported by the system. (7718)

* ThinLinc Setup on apt systems will now install the default MTA.
  Previously it would install a random package out of the ones
  providing /usr/sbin/sendmail. (7716)

* Fixed an issue where the ThinLinc Setup firewall configuration would
  fail on systems using the lokkit firewall configuration tool. (7722)

* Fixed an issue where the tl-collect-licensestats cron job would
  complain about python-thinlinc being missing if ThinLinc Setup had not
  been run. (5379)

* Require ThinLinc's configuration files to always use UTF-8. This fixes
  a bug where ThinLinc allowed configuration files in all types of
  encodings, despite only being able to handle UTF-8 properly. This is a
  hard requirement, meaning that if any of the configuration files are
  not in UTF-8, ThinLinc will not work. (7557)

Native Client
-------------

* Diffie-hellman-group14-sha1 is no longer supported in ssh key
  exchange. (7524)

* Fixed an issue in ThinLinc 4.12.1 and later where Kerberos
  authentication on Windows could fail with "Couldn't setup secure
  tunnel to Thinlinc server". (7650)

* Fixed an issue in the ThinLinc client where sessions connected from
  Windows using Kerberos authentication could get disconnected after a
  while of use. (7650)

* The client will now automatically recognize the server SSH host keys
  on a non-standard port, if the server's SSH host keys are already
  known to the client for the standard port 22. (7618)

* Fixed an issue where SSH host certificates were not properly handled
  and the client would ask the user to verify the host key on every
  connection. (7643)

* Logging of simultaneously run clients is now supported, up to a maximum
  of nine clients. (7640)

Printing Support
----------------

* Fixed an issue where the Printer Access Control feature didn't work
  on SELinux systems. (7581)

* The Printer Access Control feature will no longer incorrectly add
  non existant or removed printers. (5930)

Administration
--------------

* Fixed an issue where text would in some cases be displayed incorrectly
  in ThinLinc web administration interface. (7567)

* The status of the ThinLinc Web Access service is now visible in the
  System Health page of the Web Administration interface. (5125)

* The tool tl-config now notifies the user if setting a parameter causes
  that parameter to be created. (2522)

Corrected Issues
================

ThinLinc has also been enhanced in many other ways. The complete list
of corrected issues is::

    2522, 2552, 4245, 4279, 4378, 4562, 4586, 4607, 4613, 4614, 4697,
    4860, 4877, 4942, 4963, 5014, 5053, 5125, 5370, 5379, 5459, 5702,
    5930, 5980, 5985, 6110, 6117, 6154, 6351, 7136, 7330, 7486, 7508,
    7521, 7524, 7529, 7530, 7534, 7543, 7544, 7545, 7546, 7547, 7551,
    7552, 7553, 7554, 7556, 7557, 7558, 7560, 7562, 7564, 7566, 7567,
    7571, 7572, 7573, 7574, 7581, 7583, 7584, 7587, 7595, 7597, 7601,
    7602, 7609, 7610, 7613, 7618, 7619, 7622, 7629, 7630, 7640, 7643,
    7645, 7649, 7650, 7654, 7658, 7660, 7661, 7663, 7664, 7666, 7669,
    7671, 7674, 7676, 7678, 7688, 7689, 7691, 7692, 7694, 7695, 7696,
    7699, 7702, 7703, 7706, 7707, 7708, 7709, 7710, 7712, 7713, 7714,
    7716, 7717, 7718, 7720, 7722, 7724, 7725, 7726, 7727, 7729, 7730,
    7732, 7733, 7735, 7736, 7744

| Linux is a registered trademark of Linus Torvalds.
| ThinLinc is a registered trademark of Cendio AB.
| Ubuntu is a registered trademark of Canonical Ltd.
| Windows is a registered trademark of Microsoft, Inc.
