Release notes for v2.4.0

2024-11-22 07:20:15 +03:00 · 2021-11-01 21:56:47 +02:00 · 2021-11-01 21:56:47 +02:00 · 6b729df698
commit 6b729df698
parent 56177d461a
25 changed files with 62 additions and 36 deletions
--- a/doc/newsfragments/build-failure-mipsel-riscv.bugfix
+++ b/doc/newsfragments/build-failure-mipsel-riscv.bugfix
@ -1 +0,0 @@
-Fix build failure on mips*el and riscv64 architecture.
--- a/doc/newsfragments/client-certificate-checking.bugfix
+++ b/doc/newsfragments/client-certificate-checking.bugfix
@ -1,7 +0,0 @@
-SECURITY ISSUE
-
-Barrier now supports client identity verification (fixes CVE-2021-42072, CVE-2021-42073).
-
-To support seamless upgrades from older versions of Barrier this is currently disabled by default.
-The feature can be enabled in the settings dialog. If enabled, older clients of Barrier will be
-rejected.
--- a/doc/newsfragments/client-send-certificate.feature
+++ b/doc/newsfragments/client-send-certificate.feature
@ -1 +0,0 @@
-Barrier client now sends certificate that the server can verify.
--- a/doc/newsfragments/configuration-reading-non-ascii-windows.bugfix
+++ b/doc/newsfragments/configuration-reading-non-ascii-windows.bugfix
@ -1 +0,0 @@
-Fixed reading of configuration on Windows when the paths contain non-ASCII characters (https://github.com/debauchee/barrier/issues/976, https://github.com/debauchee/barrier/issues/974, https://github.com/debauchee/barrier/issues/444).
--- a/doc/newsfragments/dont-use-openssl-cli.bugfix
+++ b/doc/newsfragments/dont-use-openssl-cli.bugfix
@ -1 +0,0 @@
-Barrier no longer uses openssl CLI tool for any operations and hooks into the openssl library directly.
--- a/doc/newsfragments/drop-target--option.feature
+++ b/doc/newsfragments/drop-target--option.feature
@ -1 +0,0 @@
-Added `--drop-target` option that improves drag and drop support on Windows when Barrier is being run as a portable app.
--- a/doc/newsfragments/enable-crypto-by-default.feature
+++ b/doc/newsfragments/enable-crypto-by-default.feature
@ -1,2 +0,0 @@
-The `--enable-crypto` command line option has been made the default to reduce chances of accidental security mishaps when configuring Barrier from command line.
-A new `--disable-crypto` command line option has been added to explicitly disable encryption.
--- a/doc/newsfragments/fingerprint-randomart.feature
+++ b/doc/newsfragments/fingerprint-randomart.feature
@ -1,3 +0,0 @@
-Added support for randomart images for easier comparison of SSL
-certificate fingerprints. The algorithm is identical to what
-OpenSSH uses.
--- a/doc/newsfragments/fix-x11-paste.bugfix
+++ b/doc/newsfragments/fix-x11-paste.bugfix
@ -1 +0,0 @@
- Map more X11 clipboard MIME types to corresponding converters (https://github.com/debauchee/barrier/issues/344).
--- a/doc/newsfragments/gui-autostart.feature
+++ b/doc/newsfragments/gui-autostart.feature
@ -1 +0,0 @@
-Implemented a configuration option for Server GUI auto-start.
--- a/doc/newsfragments/gui-hotkey-multiple-actions.bugfix
+++ b/doc/newsfragments/gui-hotkey-multiple-actions.bugfix
@ -1 +0,0 @@
-Fixed setup of multiple actions associated with a hotkey.
--- a/doc/newsfragments/gui-hotkey-special-keys-handling.bugfix
+++ b/doc/newsfragments/gui-hotkey-special-keys-handling.bugfix
@ -1 +0,0 @@
-Fixed setup of hotkeys with special characters such as comma and semicolon (https://github.com/debauchee/barrier/issues/778).
--- a/doc/newsfragments/gui-keyboard-enabled-screen-layout.feature
+++ b/doc/newsfragments/gui-keyboard-enabled-screen-layout.feature
@ -1 +0,0 @@
-Made it possible to use keyboard instead of mouse to modify screen layout.
--- a/doc/newsfragments/keyboard-backlight-media-keys.feature
+++ b/doc/newsfragments/keyboard-backlight-media-keys.feature
@ -1 +0,0 @@
-Added support for keyboard backlight media keys
--- a/doc/newsfragments/muhenkan-eisu-toggle-keys.feature
+++ b/doc/newsfragments/muhenkan-eisu-toggle-keys.feature
@ -1 +0,0 @@
-Added support for Eisu_toggle and Muhenkan keys
--- a/doc/newsfragments/non-ascii-character-transfer.bugfix
+++ b/doc/newsfragments/non-ascii-character-transfer.bugfix
@ -1 +0,0 @@
-Fixed transfer of non-ASCII characters coming from a Windows server in certain cases (https://github.com/debauchee/barrier/issues/527).
--- a/doc/newsfragments/profile-dir-option.feature
+++ b/doc/newsfragments/profile-dir-option.feature
@ -1 +0,0 @@
-Added `--profile-dir` option that allows to select custom profile directory.
--- a/doc/newsfragments/regenerate-broken-server-cert.bugfix
+++ b/doc/newsfragments/regenerate-broken-server-cert.bugfix
@ -1 +0,0 @@
-Barrier will now regenerate server certificate if it's invalid instead of failing to launch (https://github.com/debauchee/barrier/issues/802)
--- a/doc/newsfragments/sha256-fingerprints.bugfix
+++ b/doc/newsfragments/sha256-fingerprints.bugfix
@ -1,4 +0,0 @@
-Barrier now uses SHA256 fingerprints for establishing security of encrypted SSL connections.
-After upgrading client to new version the existing server fingerprint will need to be approved again.
-Client and server will show both SHA1 and SHA256 server fingerprints to allow interoperability
-with older versions of Barrier.
--- a/doc/newsfragments/sun-keyboard-keys.bugfix
+++ b/doc/newsfragments/sun-keyboard-keys.bugfix
@ -1 +0,0 @@
-Added support for additional keys on Sun Microsystems USB keyboards (https://github.com/debauchee/barrier/issues/784).
--- a/doc/newsfragments/translation_chinese.bugfix
+++ b/doc/newsfragments/translation_chinese.bugfix
@ -1 +0,0 @@
-Updated Chinese translation.
--- a/doc/newsfragments/translation_slovak.bugfix
+++ b/doc/newsfragments/translation_slovak.bugfix
@ -1 +0,0 @@
-Updated Slovak translation.
--- a/doc/newsfragments/use-theme-icons.bugfix
+++ b/doc/newsfragments/use-theme-icons.bugfix
@ -1 +0,0 @@
-Theme icons are now preferred to icons distributed together with Barrier (https://github.com/debauchee/barrier/issues/471).
--- a/doc/newsfragments/windows-service-path.bugfix
+++ b/doc/newsfragments/windows-service-path.bugfix
@ -1 +0,0 @@
-Fixed incorrect setup of Barrier service path on Windows.
--- a/doc/release_notes/index.md
+++ b/doc/release_notes/index.md
@ -3,6 +3,68 @@ Release notes

 [comment]: <> (towncrier release notes start)

+Barrier `2.4.0` ( `2021-11-01` )
+================================
+
+Security fixes
+--------------
+
+- Barrier now supports client identity verification (fixes CVE-2021-42072, CVE-2021-42073).
+
+  Previously a malicious client could connect to Barrier server without any authentication and
+  send application-level messages. This made the attack surface of Barrier significantly larger.
+  Additionally, in case the malicious client got possession of a valid screen name by brute forcing
+  or other means it could modify the clipboard contents of the server.
+
+  To support seamless upgrades from older versions of Barrier this is currently disabled by default.
+  The feature can be enabled in the settings dialog. If enabled, older clients of Barrier will be
+  rejected.
+
+- Barrier now uses SHA256 fingerprints for establishing security of encrypted SSL connections.
+  After upgrading client to new version the existing server fingerprint will need to be approved
+  again. Client and server will show both SHA1 and SHA256 server fingerprints to allow
+  interoperability with older versions of Barrier.
+
+Bug fixes
+---------
+
+- Fixed build failure on mips*el and riscv64 architecture.
+- Fixed reading of configuration on Windows when the paths contain non-ASCII characters
+(https://github.com/debauchee/barrier/issues/976, https://github.com/debauchee/barrier/issues/974,
+ https://github.com/debauchee/barrier/issues/444).
+- Barrier no longer uses openssl CLI tool for any operations and hooks into the openssl library directly.
+- More X11 clipboard MIME types have been mapped to corresponding converters (https://github.com/debauchee/barrier/issues/344).
+- Fixed setup of multiple actions associated with a hotkey.
+- Fixed setup of hotkeys with special characters such as comma and semicolon
+  (https://github.com/debauchee/barrier/issues/778).
+- Fixed transfer of non-ASCII characters coming from a Windows server in certain cases
+ (https://github.com/debauchee/barrier/issues/527).
+- Barrier will now regenerate server certificate if it's invalid instead of failing to launch
+ (https://github.com/debauchee/barrier/issues/802)
+- Added support for additional keys on Sun Microsystems USB keyboards
+ (https://github.com/debauchee/barrier/issues/784).
+- Updated Chinese translation.
+- Updated Slovak translation.
+- Theme icons are now preferred to icons distributed together with Barrier
+ (https://github.com/debauchee/barrier/issues/471).
+- Fixed incorrect setup of Barrier service path on Windows.
+
+Features
+--------
+
+- Added `--drop-target` option that improves drag and drop support on Windows when Barrier is
+  being run as a portable app.
+- The `--enable-crypto` command line option has been made the default to reduce chances of
+  accidental security mishaps when configuring Barrier from command line.
+  A new `--disable-crypto` command line option has been added to explicitly disable encryption.
+- Added support for randomart images for easier comparison of SSL certificate fingerprints.
+  The algorithm is identical to what OpenSSH uses.
+- Implemented a configuration option for Server GUI auto-start.
+- Made it possible to use keyboard instead of mouse to modify screen layout.
+- Added support for keyboard backlight media keys
+- Added support for Eisu_toggle and Muhenkan keys
+- Added `--profile-dir` option that allows to select custom profile directory.
+
 Barrier `2.3.4` ( `2021-11-01` )
 ================================
				`@ -1 +0,0 @@`
				`Fix build failure on mips*el and riscv64 architecture.`
				`@ -1 +0,0 @@`
				`Barrier client now sends certificate that the server can verify.`
				`@ -1 +0,0 @@`
				`Fixed reading of configuration on Windows when the paths contain non-ASCII characters (https://github.com/debauchee/barrier/issues/976, https://github.com/debauchee/barrier/issues/974, https://github.com/debauchee/barrier/issues/444).`
				`@ -1 +0,0 @@`
				`Barrier no longer uses openssl CLI tool for any operations and hooks into the openssl library directly.`
				`@ -1 +0,0 @@`
				Added `--drop-target` option that improves drag and drop support on Windows when Barrier is being run as a portable app.
				`@ -1 +0,0 @@`
				`Map more X11 clipboard MIME types to corresponding converters (https://github.com/debauchee/barrier/issues/344).`
				`@ -1 +0,0 @@`
				`Implemented a configuration option for Server GUI auto-start.`
				`@ -1 +0,0 @@`
				`Fixed setup of multiple actions associated with a hotkey.`
				`@ -1 +0,0 @@`
				`Fixed setup of hotkeys with special characters such as comma and semicolon (https://github.com/debauchee/barrier/issues/778).`
				`@ -1 +0,0 @@`
				`Made it possible to use keyboard instead of mouse to modify screen layout.`