Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package freerdp for openSUSE:Factory checked in at 2026-11-13 18:31:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/freerdp (Old) and /work/SRC/openSUSE:Factory/.freerdp.new.1251 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "freerdp" Fri Nov 13 18:31:51 2026 rev:113 rq:1397064 version:3.33.1 Changes: -------- --- /work/SRC/openSUSE:Factory/freerdp/freerdp.changes 2026-11-09 16:09:15.953432741 +0100 +++ /work/SRC/openSUSE:Factory/.freerdp.new.1251/freerdp.changes 2026-11-13 18:35:42.028237477 +0100 @@ -1,0 +2,148 @@ +Wed Nov 11 21:22:21 UTC 2026 - Bjørn Lie <[email protected]> + +- Update to version 3.33.1: + * Bugfix and papercut release: + + Improved shadow server: + - Faster encoding by avoiding unchanged areas + - Back pressure from client: if it can not keep up with in flight frames + reduce quality and do not send new frames + - Windows backend improvements + - Mac os backend improvements + + Hashless certificate support (Ed25519, Ed448, ML-DSA, SLH-DSA) + + Apple videotoolbox h264 encoder/decoder support + + Various RAILS fixes (x11 and sdl) + * CVE: + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-x863-43r4-f7c2 + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m33m-4qxh-hq76 + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-52rf-pppx-qm55 + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-3664-pr8r-3254 + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rp99-f9qv-c446 + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-23fv-6wrf-5hfq + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-f6v9-vx5q-vjpf + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-m6hp-4798-x78x + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9c9j-2r7q-5gx2 + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-ch3p-5r9r-w86p + + Https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-76c4-7552-ffhv + + [channels,cliprdr] send empty format list + + [server,shadow] ignore the alpha byte when comparing X11 captures + + [client, ios] Add text clipboard, several fixes for ios clients. + + [client,x11] cliprdr: do not re-request TARGETS after the owner refused + them + + [shadow,win] inclusive monitor bounds, no copy past the screen + + [core,update] accept a bitmap wider than its rectangle + + [server,shadow] Win DXGI capture: survive ACCESS_DENIED during mode + transitions and secure desktop + + [server,shadow] rdpsnd: a format list per client, no samples before a + format is agreed + + [client,x11] keep RemoteApp windows created hidden unmapped until shown + + [winpr,input] map the Apple right Control key to VK_RCONTROL + + [shadow] server side dirty tile skipping for the GFX/RFX path + + [primitives,yuv] NEON RGBToYUV420_8u_P3AC4R and RGBToAVC444YUV/v2 + + [codec,h264] Media Foundation H.264 encoder + + [channels,rdpsnd] server: no zero padding after an Opus packet + + [shadow,win] freerdp-shadow-service: the shadow server on the console + session + + [shadow,mac] a ScreenCaptureKit backend for the macOS shadow server + + [codec,av1] faster AV1 encoding for the shadow server + + [client,sdl] map the menu and Japanese keys + + [locale] fix keyboard layout ids + + [client,x11] drop unreachable connect error block + + [shadow,win] send the sound the computer plays + + [client,server] add missing [[nodiscard]] + + [channels,rdpsnd] skip playback when decoder produces no PCM data + + Warn fixes + + [winpr,clipboard] fix big-endian BMP test + + [server,shadow] clear errno before reading the /monitors index + + Coverity fixes + + [winpr,timezone] detect the browser time zone on Emscripten + + [client,sdl] setBordered: no SDL_SyncWindow on every window event + + [server,shadow] improve keyboard injection diagnostics + + [client,sdl] rail: leave the windows lock before re-locking calls + + [core,test] fix log message arguments + + [ci,abi] disable WITH_DSP_FFMPEG + + [ci,macos] fix script argument parser + + [ci,abi] disable WITH_FFMPEG + + [ci,abi] disable rdpecam + + [channels,rdpsnd] reset the device on disconnect under the play lock + + Oss scanner + + [core,input] drop input during deactivate/reactivate + + [channels,cliprdr] do not filter empty format lists + + [winpr,thread] at least 8 MiB of stack for a default-size thread + + [core,fastpath] release the input stream when dropping input + + [core,transport] answer KTLS BIO_CTRL queries + + [client,android] keep core startup and sessions usable in API 24 + embedding apps + + [core,tcp] don't reverse resolve the address in connect error log + + [winpr,wlog] pass WINPR_HAVE_JOURNALD_H as a private definition + + [core,activation] implement full TS_BITMAPCACHE_PERSISTENT_LIST_PDU + + [core] Fix handling of inconsistent gateway settings + + [server,shadow] AVC420 for 10.x capability sets + + [server,shadow] keep the listener and frame pipeline alive with + unresponsive clients + + [primitives,yuv] fast RGBToI444_8u: generic, SSE4.1, AVX2, NEON + + [client,x11] implement xf_UnmapWindowForSurface + + [winpr,timezone] map renamed IANA zones to their other spelling + + [winpr,timezone] keep all parts of the zone name from a zoneinfo path + + [codec,video,apple] add VideoToolbox camera encoding + + [server,shadow] track desktop resolution changes during capture + + Warn cleanup + + [codec,rfx,progressive] fix inverted tile range checks + + [crypto,tls] leave the BIO retry flag to the thread that set it + + [shadow,mac] follow the client's Caps Lock + + [shadow,mac] send the Mac's cursor shapes to the clients + + [codec,h264] encode a changed region as well as a whole frame (AVC444v2 + colours, AVC420 bits) + + [client,sdl] send the display scale in the core data + + Oss scanner + + [client,common] map rdp file keyboardhook to GrabKeyboard + + [shadow,win] DXGI: pause the capture on a desktop this process may not + see + + [client,Wayland] Serialize smart-sizing geometry queries with buffer + submission + + [channels,rdpsnd] publish the wire audio format for the web page + + [channels,rdpsnd,mac] catch AVAudioEngine exceptions in play + + Oss scanner + + [winpr,sspi] try the domain as realm before an enterprise principal + + [client,x11] forward modifier keys grabbed + + [shadow,mac] the surface follows display changes + + [channels,rdpear] derive the AP-REQ authenticator PDU number from the + request + + Sdl-freerdp: fix HiDPI cursor size and hotspot on Windows + + [channels,rdpgfx] count bytes and frames in the client stats + + [client,sdl] upload all dirty rects before drawing them scaled + + [server,shadow] end the connection properly on a failed logon + + [winpr,input] fix Korean keyboard (type 8) Hangul/Hanja and numpad + mapping + + [codec,h264] set keyframe interval + + Oss scanner + + [server,shadow] mcevent: a dropped round must not end the next one + + [client,android] repeat held keys in the keyboard accessibility service + + [codec,rfx] preserve trailing zero coefficients in RLGR encoder + + [winpr,gcc] check -Werrpr=unguarded-availability-new + + [client,x11] rail: leave override-redirect windows to the server + + [client,sdl3] fix closing the client during auto reconnect + + [client,sdl] say why SDL_Init failed, /list:monitor exit code + + [client,sdl] set the app_id of RemoteApp windows from the RAIL + application ID + + [client,sdl] skip a display without a size + + Papercuts2 + + [client,sdl] rail: allow the screen saver in RemoteApp + + [core] keep a signal stop during auto reconnect + + [client,common] clipboard: no file paths without a FUSE mount + + [server,shadow] GFX flow control: at most 8 frames in flight + + [client,android] let physical keyboards use the Android layout + + [client,X11] add /floatbar:position:[left|center|right] + + [core] reject inconsistent MCS and Demand Active lengths + + [winpr,path] winpr_RemoveDirectory_RecursiveA: remove what is inside + + Warn clean + + [crypto,tls] accept certificates signed without a hash (Ed25519, ML-DSA) + + [client] fix FREERDP_CLIENT_KBD_MOD use + + [client,sdl3] fix cancel in the reconnect dialog + + [crypto,test] disable ed448 test if OpenSSL < 3.5 + + [client,common] Give each clipboard context its own FUSE mount + + [server,shadow] -sec-nla and -sec-ext manpage update + + [core,settings] prevent RemoteApplicationMode and SpanMonitors + + [client,sdl] don't re-offer the browser clipboard the server replaced +- Drop 0000-client-sdl-fix-version-guard.patch: fixed upstream. + +------------------------------------------------------------------- Old: ---- 0000-client-sdl-fix-version-guard.patch freerdp-3.33.0.tar.gz freerdp-3.33.0.tar.gz.asc New: ---- freerdp-3.33.1.tar.gz freerdp-3.33.1.tar.gz.asc ----------(Old B)---------- Old: + [client,sdl] don't re-offer the browser clipboard the server replaced - Drop 0000-client-sdl-fix-version-guard.patch: fixed upstream. ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ freerdp.spec ++++++ --- /var/tmp/diff_new_pack.5MEajP/_old 2026-11-13 18:35:44.600346375 +0100 +++ /var/tmp/diff_new_pack.5MEajP/_new 2026-11-13 18:35:44.605346586 +0100 @@ -42,7 +42,7 @@ %define uwac_package %{uwac_version}-%{uwac_version} Name: freerdp -Version: 3.33.0 +Version: 3.33.1 Release: 0 Summary: Remote Desktop Viewer Client License: Apache-2.0 @@ -52,7 +52,6 @@ Source1: https://github.com/FreeRDP/FreeRDP/releases/download/%{version}/%{name}-%{version}.tar.gz.asc Source2: %{name}.keyring Source3: freerdp-rpmlintrc -Patch0: 0000-client-sdl-fix-version-guard.patch BuildRequires: chrpath BuildRequires: cmake >= 2.8 BuildRequires: cups-devel ++++++ freerdp-3.33.0.tar.gz -> freerdp-3.33.1.tar.gz ++++++ /work/SRC/openSUSE:Factory/freerdp/freerdp-3.33.0.tar.gz /work/SRC/openSUSE:Factory/.freerdp.new.1251/freerdp-3.33.1.tar.gz differ: char 29, line 1
