=============================
ThinLinc 4.14.0 Release Notes
=============================

Introduction
============

Cendio are proud to present ThinLinc 4.14.0, with more than 60
enhancements and fixes. The most prominent changes are:

* The native client now supports full-screen mode over arbitrary set of
  monitors. This can be useful for users that mainly work in ThinLinc,
  but has some local applications they still need. They can now have
  ThinLinc on two monitors, and let a third monitor continue showing the
  local system.

* Future versions of the ThinLinc client will not support SSH servers
  that are using the older "ssh-rsa" method for host keys or public key
  authentication. For most that means OpenSSH 7.2 or later is required
  on ThinLinc server systems.

* Support for some older platforms has been removed. The ThinLinc client
  is no longer available for eLux RP 5. The ThinLinc server now only
  supports 64-bit x86 systems. ThinLinc Web Access no longer supports
  Internet Explorer or the previous generation Microsoft Edge browser.

ThinLinc works on most modern Linux distributions and is supported on
any platform that fulfills our documented requirements.

Changes in This Release
=======================

In the list below, the bug number is given in parentheses. For more
information, visit https://www.cendio.com/bugzilla/.

Server
------

* Upgrades of xorg-server to 1.20.13 and libX11 to 1.7.2 fixes multiple
  vulnerabilities where a malicious application could cause the X server
  to crash or execute arbitrary code. [CVE-2019-17624, CVE-2020-14344,
  CVE-2020-14345, CVE-2020-14346, CVE-2020-14347, CVE-2020-14360,
  CVE-2020-14361, CVE-2020-14362, CVE-2020-14363, CVE-2020-25712,
  CVE-2021-3472] (7773)

* The ThinLinc server now requires a 64-bit x86 system. 32-bit x86
  systems are no longer supported. Note that 32-bit applications on a
  64-bit system are still fully supported. (5308)

* The ThinLinc server can now be used with up to 10 concurrent users per
  organization for organizations that do not have any user licenses.
  Previously this was limited to 5 concurrent users. As before, the full
  product functionality is provided for these users. (7808)

* Fixed an issue where the session-side DPI would diverge from the
  intended DPI over a number of session resizes. (7267)

Native Client
-------------

* The ThinLinc client is now able to use an arbitrary set of monitors in
  full-screen mode. E.g. two out of three connected monitors. (7006)

* The default behavior is now to start in windowed mode instead of
  full-screen mode. This does not apply to clients packaged for thin
  terminals. (7805)

* The display settings have been changed to be more clear and to avoid
  confusing and possibly conflicting settings. (7793)

* The setting tabs have been reorganized to make the most commonly used
  settings easier to find. As a part of this, the the tab previously
  called "Screen" has been renamed to "Display", and the tab previously
  named "Options" has been renamed to "Advanced". (7522, 7793)

* The options window when connected will now show the same settings as
  before logging in. (7522)

* SSH host key fingerprints now use SHA256 and are shown along with
  their corresponding host key types in a manner similar to OpenSSH.
  (7639, 7756)

* OpenSSH has been upgraded to version 8.7p1. This changes the first
  preference signature algorithm from ECDSA to ED25519. Note that this
  is the last release with the ssh-rsa signature scheme enabled. (7764)

* Fixed an issue where the ThinLinc client could not log in to the SSH
  server with password. This happened when the SSH server was configured
  with 'ChallengeResponseAuthentication yes' and 'UsePAM no'. (4062)

* Improved error messages for the user when providing incorrect key
  file for public key authentication. (7313)

* The ThinLinc client will now present an error message if the
  connection is unexpectedly terminated. (7479)

* Fixed an issue where the ThinLinc client application name was not
  translated on current versions of macOS. (7269)

* Fixed an issue where the ThinLinc client interface was not translated
  on macOS once you were logged in. (7270)

* Authentication using Aventra MyEID smart cards with 4096 bit keys is
  now supported. (7600)

* The native client is no longer available for eLux RP 5. (7774)

* Fixed an issue on macOS where all monitors but one would become
  unusable when going from full screen on all monitors to full screen
  on one monitor. (7795)

* The ThinLinc client now respects changes to the system's monitor
  configuration while connected. (7007)

* The Linux and macOS client no longer fails to start if opened with an
  empty or badly formatted log file. (7798)

* Fixed an issue where the '-x' (XDM mode) and '--force fullscreen'
  command line arguments would not always result in full-screen mode
  over all monitors. (7803)

ThinLinc Web Access
-------------------

* Internet Explorer is no longer a supported browser for Web Access,
  a more modern web browser is required. (7550)

Documentation
-------------

* The ThinLinc Administrator's Guide's appearance has been improved, has
  gotten better cross references for configuration variables, and now
  has an integrated search function. (4951)

Configuration Changes
=====================

New
---

* New client settings `FULL_SCREEN_MONITOR_MODE` and
  `FULL_SCREEN_SELECTED_MONITORS` to control which monitors that are
  used when in full-screen mode.

Modified
--------

* The client setting `FULL_SCREEN_MODE` now defaults to `0`.

Removed
-------

* The client settings `REMOTE_RESIZE` has been removed and the
  corresponding feature is now always enabled.

* The client settings `SCREEN_SIZE_SELECTION`, `SCREEN_X_SIZE` and
  `SCREEN_Y_SIZE` have been removed and are now determined by the
  full-screen configuration.

A complete configuration reference can be found in the ThinLinc
Administrators Guide.

Corrected Issues
================

ThinLinc has also been enhanced in many other ways. The complete list
of corrected issues is::

     289, 1560, 3744, 3881, 4051, 4062, 4617, 4734, 4951, 5015, 5095, 
    5127, 5289, 5308, 5528, 5591, 5846, 6021, 6974, 7006, 7007, 7201, 
    7267, 7269, 7270, 7313, 7479, 7522, 7549, 7550, 7559, 7585, 7600, 
    7608, 7639, 7723, 7755, 7756, 7758, 7759, 7762, 7764, 7766, 7771, 
    7773, 7774, 7775, 7776, 7777, 7778, 7781, 7784, 7785, 7789, 7792, 
    7793, 7795, 7796, 7798, 7803, 7805, 7808, 7822

| eLux is a registered trademark of UniCon Software GmbH.
| Linux is a registered trademark of Linus Torvalds.
| macOS and OS X are registered trademarks of Apple Computer, Inc.
| ThinLinc is a registered trademark of Cendio AB.
