=============================
ThinLinc 4.16.0 Release Notes
=============================

Introduction
============

Cendio are proud to present ThinLinc 4.16.0, with more than 30
enhancements and fixes. The most prominent changes are:

* The ThinLinc server has been reworked to be compatible with changes in
  modern Python versions, for example Python 3.12. This means that it is
  prepared for future releases like Red Hat Enterprise Linux 10 and
  Ubuntu 24.04. It also means that recent distributions like Fedora 39
  are now supported.

* Several security issues have been addressed, both in the ThinLinc
  server and client. The issues are all either difficult to exploit, or
  have minimal consequences. As such, users are advised to upgrade when
  convenient.

ThinLinc works on most modern Linux distributions and is supported on
any platform that fulfills our documented requirements.

Changes in This Release
=======================

In the list below, the bug number is given in parentheses. For more
information, visit https://bugzilla.cendio.com.

Server
------

* Fixed multiple vulnerabilities where a malicious application could
  cause the X server to crash or execute arbitrary code. [CVE-2023-5367,
  CVE-2023-5380, CVE-2023-6377, CVE-2023-6478] (8282)

* Fixed several incompatibilities with modern and upcoming Python
  versions. (7636, 8159, 8161, 8162, 8222, 8224, 8230, 8232, 8242)

* Fixed an issue where running the command tl-show-licenses could result
  in a new email being sent to the configured administrator email
  address. (5676)

* The ThinLinc server now requires Python 3.4.4 or newer instead of
  Python 3.4.0 (8254)

Native Client
-------------

* Fixed several issues in the ThinLinc client that could enable an
  attacker to cause a connection to slow down or disconnect.
  [CVE-2023-3446, CVE-2023-3817, CVE-2023-4807, CVE-2023-5678]. (8279)

* Fixed an issue where the ThinLinc client on Windows could sometimes
  fail to connect when running multiple sessions for the same user.
  (8261)

ThinLinc Web Access
-------------------

* Patched security vulnerabilities which under certain circumstances
  could allow an attacker to decrypt communication between a client and
  ThinLinc Web Access. [CVE-2023-5981, CVE-2023-0361] (8280)

Local Drive Redirection
-----------------------

* Fixed an issue where local drive redirection would sometimes fail to
  work when using a Linux client. A segmentation fault could be seen for
  the unfsd process in the client log file when this happened. (8291)

* Fixed an issue that could prevent a session from starting if mounting
  local drives failed. (7900)

Administration
--------------

* Patched security vulnerabilities which under certain circumstances
  could allow an attacker to decrypt communication between a client and
  ThinLinc Web Administration. [CVE-2023-5981, CVE-2023-0361] (8280)

Corrected Issues
================

ThinLinc has also been enhanced in many other ways. The complete list
of corrected issues is::

    2670, 3711, 5032, 5556, 5665, 5676, 5936, 6143, 7098, 7592, 7636,
    7648, 7659, 7670, 7863, 7900, 8159, 8161, 8162, 8170, 8210, 8222,
    8224, 8226, 8230, 8231, 8232, 8242, 8249, 8254, 8259, 8260, 8261,
    8272, 8279, 8280, 8281, 8282, 8287, 8291

| Fedora is a registered trademark of Red Hat, Inc.
| Linux is a registered trademark of Linus Torvalds.
| Red Hat is a registered trademark of Red Hat, Inc.
| ThinLinc is a registered trademark of Cendio AB.
| Ubuntu is a registered trademark of Canonical Ltd.
| Windows is a registered trademark of Microsoft, Inc.
