Introduction
Cendio are proud to present ThinLinc 4.14.0, with more than 60 enhancements and fixes. The most prominent changes are:
The native client now supports full-screen mode over an arbitrary set of monitors. This can be useful for users that mainly work in ThinLinc, but has some local applications they still need. They can now have ThinLinc on two monitors, and let a third monitor continue showing the local system.
Future versions of the ThinLinc client will not support SSH servers that are using the older "ssh-rsa" method for host keys or public key authentication. For most that means OpenSSH 7.2 or later is required on ThinLinc server systems.
Support for some older platforms has been removed. The ThinLinc client is no longer available for eLux RP 5. The ThinLinc server now only supports 64-bit x86 systems. ThinLinc Web Access no longer supports Internet Explorer or the previous generation Microsoft Edge browser.
ThinLinc works on most modern Linux distributions and is supported on any platform that fulfills our documented requirements.
Changes in This Release
In the list below, the bug number is given in parentheses. For more information, visit https://www.cendio.com/bugzilla/.
Server
Upgrades of xorg-server to 1.20.13 and libX11 to 1.7.2 fixes multiple vulnerabilities where a malicious application could cause the X server to crash or execute arbitrary code. [CVE-2019-17624, CVE-2020-14344, CVE-2020-14345, CVE-2020-14346, CVE-2020-14347, CVE-2020-14360, CVE-2020-14361, CVE-2020-14362, CVE-2020-14363, CVE-2020-25712, CVE-2021-3472] (7773)
The ThinLinc server now requires a 64-bit x86 system. 32-bit x86 systems are no longer supported. Note that 32-bit applications on a 64-bit system are still fully supported. (5308)
The ThinLinc server can now be used with up to 10 concurrent users per organization for organizations that do not have any user licenses. Previously this was limited to 5 concurrent users. As before, the full product functionality is provided for these users. (7808)
Fixed an issue where the session-side DPI would diverge from the intended DPI over a number of session resizes. (7267)
Native Client
The ThinLinc client is now able to use an arbitrary set of monitors in full-screen mode. E.g. two out of three connected monitors. (7006)
The default behavior is now to start in windowed mode instead of full-screen mode. This does not apply to clients packaged for thin terminals. (7805)
The display settings have been changed to be more clear and to avoid confusing and possibly conflicting settings. (7793)
The setting tabs have been reorganized to make the most commonly used settings easier to find. As a part of this, the the tab previously called "Screen" has been renamed to "Display", and the tab previously named "Options" has been renamed to "Advanced". (7522, 7793)
The options window when connected will now show the same settings as before logging in. (7522)
SSH host key fingerprints now use SHA256 and are shown along with their corresponding host key types in a manner similar to OpenSSH. (7639, 7756)
OpenSSH has been upgraded to version 8.7p1. This changes the first preference signature algorithm from ECDSA to ED25519. Note that this is the last release with the ssh-rsa signature scheme enabled. (7764)
Fixed an issue where the ThinLinc client could not log in to the SSH server with password. This happened when the SSH server was configured with 'ChallengeResponseAuthentication yes' and 'UsePAM no'. (4062)
Improved error messages for the user when providing incorrect key file for public key authentication. (7313)
The ThinLinc client will now present an error message if the connection is unexpectedly terminated. (7479)
Fixed an issue where the ThinLinc client application name was not translated on current versions of macOS. (7269)
Fixed an issue where the ThinLinc client interface was not translated on macOS once you were logged in. (7270)
Authentication using Aventra MyEID smart cards with 4096 bit keys is now supported. (7600)
The native client is no longer available for eLux RP 5. (7774)
Fixed an issue on macOS where all monitors but one would become unusable when going from full screen on all monitors to full screen on one monitor. (7795)
The ThinLinc client now respects changes to the system's monitor configuration while connected. (7007)
The Linux and macOS client no longer fails to start if opened with an empty or badly formatted log file. (7798)
Fixed an issue where the '-x' (XDM mode) and '--force fullscreen' command line arguments would not always result in full-screen mode over all monitors. (7803)
ThinLinc Web Access
Internet Explorer is no longer a supported browser for Web Access, a more modern web browser is required. (7550)
Documentation
The ThinLinc Administrator's Guide's appearance has been improved, has gotten better cross references for configuration variables, and now has an integrated search function. (4951)
Configuration Changes
New
New client settings FULL_SCREEN_MONITOR_MODE and FULL_SCREEN_SELECTED_MONITORS to control which monitors that are used when in full-screen mode.
Modified
The client setting FULL_SCREEN_MODE now defaults to 0.
Removed
The client settings REMOTE_RESIZE has been removed and the corresponding feature is now always enabled.
The client settings SCREEN_SIZE_SELECTION, SCREEN_X_SIZE and SCREEN_Y_SIZE have been removed and are now determined by the full-screen configuration.
A complete configuration reference can be found in the ThinLinc Administrators Guide.
Corrected Issues
ThinLinc has also been enhanced in many other ways. The complete list of corrected issues is:
289, 1560, 3744, 3881, 4051, 4062, 4617, 4734, 4951, 5015, 5095, 5127, 5289, 5308, 5528, 5591, 5846, 6021, 6974, 7006, 7007, 7201, 7267, 7269, 7270, 7313, 7479, 7522, 7549, 7550, 7559, 7585, 7600, 7608, 7639, 7723, 7755, 7756, 7758, 7759, 7762, 7764, 7766, 7771, 7773, 7774, 7775, 7776, 7777, 7778, 7781, 7784, 7785, 7789, 7792, 7793, 7795, 7796, 7798, 7803, 7805, 7808, 7822