Subject: CVS commit: pkgsrc/net/freerdp2
From: Mark Davies
Date: 2023-01-16 20:20:15
Message id: 20230116192015.E719CFA90@cvs.NetBSD.org

Log Message:
freerdp2: update to 2.9.0

# 2022-11-16 Version 2.9.0

Notewhorth changes:
* Support sending server redirection PDU
* Ensure X11 client cursor is never smaller 1x1
* Fixed multiple client side input validation issues
  (CVE-2022-39316, CVE-2022-39317, CVE-2022-39318, CVE-2022-39319,
         CVE-2022-39320, CVE-2022-41877, CVE-2022-39347)
* Proxy server now discards input events sent before
  activation was received
* Internal replacements for md4, md5 and hmac-md5
   For the time being the RDP protocol requires these outdated hash
   algorithms. So any distribution that wants to ship a working
   FreeRDP should check the options WITH_INTERNAL_MD4 (and depending
   on OpenSSL deprecation status WITH_INTERNAL_MD5)

Fixed issues:
* Null checks in winpr_Digest_Free
* Missing NULL return in winpr_Digest_New
* Support for audin version 2 microphone channel
* Discard input events before activation

# 2022-10-12 Version 2.8.1

Notewhorth changes:
* Fixed CVE-2022-39282
* Fixed CVE-2022-39283
* Remove ALAW/ULAW codecs from linux backends (unreliable)
* Added hash checks for android build script dependencies

Fixed issues:
* Fix build break with newer FFMPEG versions
* Updated flatpak with build script
* Better execinfo support check for android
* Header now defines DumpThreadHandles
* Check fullscreen state and not setting
* Send resize on window state change
* Audin macOS monterey fix
* Android build script update

# 2022-07-28 Version 2.8.0

Noteworthy changes:

* Backported API to get peer accepted channel option flags
* Backported API to get peer accepted channel names
* Backported Stream_CheckAndLogRequiredLength
* Add server side handling for [MS-RDPET]
* Add server side handling for [MS-RDPECAM]
* Remove ALAW/ULAW codecs from linux backends (unreliable)
* Relieve CLIPRDR filename restriction when connecting to non-MS Windows servers
* TLS version control
* Add a new command line arg to enforce tls1.2

Fixed issues:

* Prevent out of bound reads for FFMPEG
* Unwind support for backtrace generation
* wlfreerdp appid
* RAIL window restore
* Refactored WinPR thread locking
* Mac rdpsnd memory leak fixes
* Mac audin memory leak fixes
* Automatic android versioning
* GFX 10.7 capability support
* Server RDPSND API improvements
* Server DVC API improvements
* Fixed osMinorType values
* Add missing osMajorType values
* Fix wrong usage of subband diffing flag (tile artifact fix)

# 2022-04-25 Version 2.7.0

Noteworthy changes:
* Backported OpenSSL3 gateway support
* Backported various NTLM fixes
* Backported WINPR_ASSERT to ease future backports

Fixed issues:
* Use /network:auto by default
* Workaround for broken surface frame marker
* Support 10bit X11 color (BGRX32 only)
* GFX progressive double free
* Disable websockets with /gt:rpc
* RAIL expect LOGON_MSG_SESSION_CONTINUE

# 2022-03-07 Version 2.6.1

Noteworthy changes:

Fixed issues:
* Backported freerdp_abort_connect during freerdp_connect fix
* Backported improved version dection see docs/version_detection.md for details
* Backported various rdpsnd fixes

# 2022-02-22 Version 2.6.0

Noteworthy changes:
* Backported android FFMPEG build scripts
* Updated android build dependencies

Fixed issues:
* Fix PDU length for RDPINPUT_PROTOCOL_V300
* Sanitize optional physical monitor size values
* Wayland memory corruption
* Remove unused codec x264
* Allow resolutions larger 2048x2048
* FFMPEG 5.0 support
* Fixed device hotplugging
* GetUserNameExA: Prefer getpwuid_r over getlogin_r over getlogin
* Android Mediacodec support

# 2022-01-12 Version 2.5.0

Noteworthy changes:
* Fixed smartcard login in case a redirection occurs the pin was lost
* Backported windows client drawing fixes
* Backported improved macOS keyboard layout detection
* Backported TcpConnectTimeout
* Backported LibreSSL compatibility patches
* Backported signal handler backtrace
* Backported OpenSSL 3.0 support

Fixed issues:
* Wayland client clipboard issues
* Various fixes regarding registry emulation, addin loader
  and updated locale detection
* Android android_register_pointer missing initialization

# 2021-10-20 Version 2.4.1

Noteworthy changes:
* Refactored RPC gateway parsing code
* OpenSSL 3.0 compatibility fixes
* USB redirection: fixed transfer lengths

Fixed issues:
* Length checks in ConvertUTF8toUTF16
* Added checks for bitmap width and heigth values

Important notes:
* CVE-2021-41159: Improper client input validation for gateway connections
  allows to overwrite memory
* CVE-2021-41160: Improper region checks in all clients allow out of bound
  write to memory

# 2021-07-27 Version 2.4.0

Noteworthy changes:
* Backported multithreadded progressive decoder
* Backported clipboard fixes
* Fixed remote file read

Fixed issues:
* RAILS clipboard remote -> local
* Support newer FFMPEG builds
* Use OpenSSL default certificate store settings
* Planar alignment fixes

Files:
RevisionActionfile
1.34modifypkgsrc/net/freerdp2/Makefile
1.5modifypkgsrc/net/freerdp2/PLIST
1.13modifypkgsrc/net/freerdp2/distinfo
1.2modifypkgsrc/net/freerdp2/patches/patch-winpr_libwinpr_CMakeLists.txt