TightVNC 2.8.11

* Fixed a potential security problem which could allow a logged in user to gain elevated privilegies in file transfers. This problem affected Windows 2000 systems only.
* CPU use was significantly reduced in idle periods when there are no users connected.
* Fixed a problem which resulted in wrong color rendering on "big-endian" viewers (e.g. PowerPC-based Mac viewers).
* Fixed rendering of semi-transparent mouse cursors. Previously, big black boxes could be seen instead of such cursors.

# Changes in TightVNC Server:
* Fixed a bug which prevented file transfers from working properly under Windows 2000.
* Introducing new "error handler" which allows saving memory dumps on critical errors.
* In systems with swapped left and right mouse buttons, remote mouse events will be adjusted accordingly. As a result, the remote mouse should work just like the local one.
* Fixed a number of problems led to errors on setting service passwords from the installer.
* Not allowing to enter administrative passwords longer than eight characters. This limitation is caused by using standard DES-based VNC-compatible authentication. Previous versions used only the first eight characters anyway but it was possible to enter longer passwords and that could confuse users who did not know about the limitation.
* Fixed a problem with injecting lowercase characters when CapsLock was on on the server. Previous version generated uppercase characters when CapsLock was on, regardless of the Shift state.
* Implemented a special trick to bypass the problem with generating "^6" instead of "6" when using US International keyboard layout. It looks like there is a bug in Windows so we could do nothing better than to cook a workaround specifically for this case.
* Fixed clipboard handling with multiple client connections. Previously, clipboard contents might not be sent to particular clients in certain circumstances.
* Adjusted log verbosity levels for log messages generated by the control interface connection, so that such messages will not overload the log any more.
* Improved support for simple RFB clients that cannot handle desktop size changes.
* Made minor adjustments in the user interface. Specifically, the "About..." form has been cleaned up, and a typo has been corrected in the Configuration window.
# Changes in TightVNC Viewer:
* Fixed a number of problems with keyboard handling: preventing modifier keys from being stuck on switching to/from the viewer window; distinguishing left and right modifiers properly; sending arbitrary Unicode characters even if they were not defined in the original X11 protocol; and sending correct codes for the keys on the numeric keypad.
* Ctrl-Alt-Del combination should not depend on current ScrollLock state (which normally toggles Alt key to Meta key conversion).
* Fixed an issue with not sending update requests after choosing Minimize then Maximize on the viewer window (as opposed to the Minimize/Restore sequence which always worked correctly).
* Fixed a number of problems with saving and restoring connection options.
* Fixed user interface logic in the Options window. There were incorrect dependencies between compression-related controls.
* Improved phrasing for a number of error messages and log records in the file transfer module.
# Changes in the Source Code Distribution:
* Visual Studio 2010 is now supported, upgraded solution and project files are included in the source distribution. Versions for Visual Studio 2008 are included as well.

* Server for Windows: The server could work incorrectly or even crash when font size adjustment or DPI scaling feature was used. New version should be fully compatible with Windows desktop scaling. This fix was developed for TightVNC 2.0.1 but was not included in that version due to a packaging problem.
* Server and Viewer for Windows: More fixes have been made to solve problems with clipboard transfers. Both server and viewer could send question characters instead of non-ASCII symbols if current input language did not match the text encoding. These fixes complement related changes introduced in version 2.0.1.

- It fixes incompatibility with Windows DPI scaling feature, recovers log files "rotation" and fixes code page translations in clipboard transfers.

* Server and Viewer for Windows: Introducing new file transfer subsystem based on new protocol extensions. Multiple files and directories can be copied at once, directories are processed recursively. Data compression is used to speed-up copying. Files can be renamed or removed, new directories can be created. File sizes are not limited by 4 Gb any more.
* Server for Windows: Implemented new architecture which separates service code from the user interface. This enables service-mode operation under Windows Vista and Windows 7. Also, this fixes all known problems with multi-user features of modern Windows systems like Fast User Switching and Terminal Services.
* Server for Windows: Screen updates have become reliable. If something went wrong and the picture in the viewer is garbled, incomplete or outdated, it will be recovered in reasonable time. There should be no more hidden menus or destructive window movements. If fast update detection methods fail, full-screen polling will keep updates going.
* Server for Windows: Featuring new secure administrative interface. What was called "TightVNC tray icon" in previous versions is now a separate process which acts as a control interface to the TightVNC service. Control interface can be optionally protected with a password to make sure users cannot reconfigure or shut down the service unless they know the password (or have administrator privileges).
* Server for Windows: There should be no more confusion between "default settings" and "user settings". In TightVNC 2.0, there is only one service-mode configuration and it is not affected by any per-user settings. The "Configure..." menu item of the service always shows the effective configuration. From the other side, TightVNC Server can be started as an application, and in that case each user has his/her own configuration.
* Server for Windows: Featuring IP-based access control for incoming connections. Previous versions of TightVNC did allow similar IP filtering, but now everything is easily configurable. You can even test the rules on specific IP addresses, prior to applying new rules.
* Installer: TightVNC 2.0 distribution has been packaged with new installer. It's smarter and more efficient. It tries to prevent reboots whenever possible. It invites to set passwords so that TightVNC Server would be ready to work right at the moment of finishing the installation. From the other side, it can operate silently (when run with /S option in the command line). Finally, the complete self-installing TightVNC package (both server and viewer parts, and the uninstall tool) is only 550 kilobytes in size.
* Server and Viewer for Windows: Keyboard handling has been improved. Older versions of TightVNC had problems with passing characters that do not fit in the Latin-1 code space. TightVNC 2.0 adds full support for different national codepages and keyboard layouts.

* Installer for Windows: Fixed a bug with uninstaller not removing TightVNC entries from Add/Remove Programs list. Also, new installer should remove invalid entries left by previous Beta versions.
* Installer for Windows: Trying to recover registry entries created with wrong permissions by previous Beta versions. Correct permissions to the service-mode configuration should give access only to SYSTEM and to the Administrators group.
* Server for Windows: Fixed a bug with not simulating AltGr (Alt and Ctrl) to produce characters that require AltGr to be entered correctly in current keyboard layout.
* Server for Windows: Fixed cursor shape updates that were encoded and sent incorrectly if the cursor width was not a multiple of 16. That led to disconnects due to broken protocol synchronization.
* Server for Windows: Control interface erroneously tried to read configuration from the registry after it was already given that configuration by the service. That could cause IP access control rules to disappear from the configuration under certain circumstances.
* Server for Windows: Registry entries could be created with wrong permissions while writing configuration or installing initial service-mode passwords.
* Server for Windows: Solved the problem of not shutting down the control interface if the tray menu was open at the moment of shutdown.
* Server for Windows: More logging has been added to trace RFB initialization sequence for client connections.
* Server for Windows: Fixed a problem with sending framebuffer updates for screen areas beyond the requested region.
* Viewer for Windows: New version fixes problems with sending key combinations like Ctrl+A, Ctrl+[ or Ctrl+Shift+^ that should produce control characters with ASCII codes below 32.
* Viewer for Windows: Various other key combinations with Ctrl and AltGr have been fixed.
* Viewer for Windows: Recovered CapsLock functionality that was broken in previous Beta version.
* Viewer for Windows: Key codes have been corrected for a number of keys: F1, F2, F3, F4, "=".
* Viewer for Windows: New viewer will reset keyboard modifiers to their actual state on restoring keyboard focus. After leaving the viewer window with Alt+Tab and returning to the viewer again, Alt could get "stuck" and one would need to press Alt once again to restore correct keyboard handling.
* Viewer for Windows: Win key presses will not be propagated to the server any more. Otherwise, combinations like Win+R would have both local effect (e.g. open the "Run" prompt) and also open the Start menu remotely.
* Viewer for Windows: Special ScrollLock functionality has been restored. When ScrollLock is on, the viewer will send Meta on pressing Alt. This may be handy when working on Unix servers.
* Viewer for Windows: Fixed a problem with adjusting the listening port number using arrow buttons near the text field. It could add thousands separator and produce invalid numbers in the text field.

- Server and Viewer for Windows: There were many enhancements and fixes related to keyboard handling. Keyboard handling is the primary focus of this Beta version.
- Server for Windows: A bug with clipboard handling has been fixed. When running as a service, TightVNC Server could crash if a user copied something to the clipboard.
- Server for Windows: There was a bug which caused the control interface to crash if the server had a lot of IP addresses. The problem has been resolved.
- Server for Windows: File uploads could fail at changing file modification timestamps. This bug has been fixed.
- Server for Windows: Fixed a bug with Web access not enabled by default.
- Viewer for Windows: When run with the -help command-line option, the viewer listed a lot of options it actually does not support. This has been fixed. Unsupported options have been removed, supported options have received better documentation.
- Viewer for Windows: Unsupported command-line options were treated as host names to connect to. Now the viewer will report error messages on discovering unknown options in the command line.
- Viewer for Windows: The viewer used to connect to nowhere if it could not read the specified .vnc file. Now it should exit correctly after showing the error message.
- Viewer for Windows: In connection options, the check box "Request shared session" will be disabled after the connection has been established.
- There were other minor improvements and fixes.

* Installer: Valid digital signatures have been added to the installer and installed TightVNC executable files.
* Installer: Featuring new option to add exceptions for TightVNC Server and Viewer to Windows Firewall (supported in Windows XP SP2 or any later version of Windows).
* Installer: Featuring new option to enable system services simulate well-known Ctrl-Alt-Del keyboard combination under Windows Vista and above.
* Installer: The service configuration page (where initial passwords can be set) has become completely optional. And that page will not be auto-selected if the passwords have been set already.
* Installer: An issue with file sharing failure has been fixed - it could be experienced after trying to set both passwords via the service configuration page. Also, there were potential problems with not actually enabling authentication on setting passwords from the installer - they have been fixed as well.
* Installer: There was a number of other minor changes such as user interface enhancements and improvements to the installation logic.
* Server for Windows: Keyboard handling has been fixed. Previous Beta version could handle combinations like Ctrl-C or Ctrl-V incorrectly - it could insert literal C or V instead. New version fixes that - it should interpret keyboard modifiers properly. In addition, it fully supports Windows and Menu keys. Finally, sending Ctrl-Alt-Del remotely should work on all supported versions of Windows.
* Server for Windows: Authentication subsystem has been improved - now it would prevent brute-force attacks on passwords by introducing delays after failed authentication attempts. This works for both RFB connections and for administrative passwords. Another authentication-related fix eliminates erroneous authentication requests on reverse connections.
* Server for Windows: Tight encoder has been fixed - it could work incorrectly in previous Beta version. It did not preserve the state of its data stream in situations when it was disabled and then re-enabled by the viewer. As a result, the viewer could not decode compressed data and had to disconnect. Corrected code accurately preserves the state of each encoder to eliminate such protocol synchronization problems.
* Server for Windows: Clipboard handling has been recovered. Clipboard transfers could fail in either direction due to text format translation problems - resolved now.
* Server for Windows: Mouse position tracking over multiple monitors has been fixed. Previously, coordinates of the mouse cursor could be calculated incorrectly if the primary monitor was not the leftmost and topmost one within a composite desktop.
* Server for Windows: New version sends viewers descriptive error messages if it must close their connections in the very beginning of the session. For example, if the server does not allow "loopback" connections, the viewer will report that fact. Similarly, the viewer should report other errors like protocol version mismatch or rejects caused by repetitive authentication failures.
* Server for Windows: Several useful command-line options have been re-implemented: -connect, -disconnectall, -reload and -shutdown (they must be preceded with either -controlservice or -controlapp in the command line). Similar options (with slightly different names) were supported by TightVNC 1.x, but there were no counterparts available in TightVNC 2.0 Beta 1.
* Server for Windows: Compatibility with other software has been improved. In particular, palette-based pixel formats are now properly supported. TightVNC Viewer never requests indexed colors, but other RFB-compliant software may do that. Previous version of the TightVNC Server could calculate palette colors incorrectly, effectively converting all colors to black. That issue has been resolved.
* Server for Windows: In TightVNC file transfer protocol, file modification timestamps are represented in milliseconds. However, previous version erroneously decreased precision and actually operated with pure seconds. That has been fixed.
* Server for Windows: There was a number of other improvements, including architectural adjustments, additional logging, fixes for real and potential memory leaks, code cleanups, and so on.
* Viewer for Windows: A bug with registering .vnc file extension has been fixed. The viewer wrote incorrect command line to the registry and then could not restore connections saved in .vnc files.
* Viewer for Windows: Keyboard handling has been improved. New version is able to send Windows and Menu keys over the RFB protocol.
* Viewer for Windows: File modification time format has been corrected in file transfer panels. Timestamps were formatted in UTC for some reason, but now they should show up in local time zone.
* Viewer for Windows: "Local cursor shape" setting has been recovered. Now it should take immediate effect on pressing the Ok button in the Connection Options window. In addition, pressing that Ok button would not hide remote cursor - that was another bug fixed in this version.
* Viewer for Windows: TightVNC Viewer could write repetitive entries to the connection history and it could create meaningless directories in the registry when parsing its command line.
* Other minor improvements and fixes have been made.

* Server and Viewer for Windows: Introducing new file transfer subsystem based on new protocol extensions. Multiple files and directories can be copied at once, directories are processed recursively. Data compression is used to speed-up copying. Files can be renamed or removed, new directories can be created. File sizes are not limited by 4 Gb any more.

* Server for Windows: Implemented new architecture which separates service code from the user interface. This enables service-mode operation under Windows Vista and Windows 7. Also, this fixes all known problems with multi-user features of modern Windows systems like Fast User Switching and Terminal Services.

* Server for Windows: Screen updates have become reliable. If something went wrong and the picture in the viewer is garbled, incomplete or outdated, it will be recovered in reasonable time. There should be no more hidden menus or destructive window movements. If fast update detection methods fail, full-screen polling will keep updates going.

* Server for Windows: Featuring new secure administrative interface. What was called "TightVNC tray icon" in previous versions is now a separate process which acts as a control interface to the TightVNC service. Control interface can be optionally protected with a password to make sure users cannot reconfigure or shut down the service unless they know the password (or have administrator privileges).

* Server for Windows: There should be no more confusion between ?default settings? and ?user settings". In TightVNC 2.0, there is only one service-mode configuration and it is not affected by any per-user settings. The "Configure..." menu item of the service always shows the effective configuration. From the other side, TightVNC Server can be started as an application, and in that case each user has his/her own configuration.

* Server for Windows: Featuring IP-based access control for incoming connections. Previous versions of TightVNC did allow similar IP filtering, but now everything is easily configurable. You can even test the rules on specific IP addresses, prior to applying new rules.

* Installer: TightVNC 2.0 distribution has been packaged with new installer. It's smarter and more efficient. It tries to prevent reboots whenever possible. It invites to set passwords so that TightVNC Server would be ready to work right at the moment of finishing the installation. From the other side, it can operate silently (when run with /S option in the command line). Finally, the complete self-installing TightVNC package (both server and viewer parts, and the uninstall tool) is only 550 kilobytes in size.

* Windows Server: Impersonating currently logged on user while processing file transfer requests. Disabling file transfers if current user is unknown or nobody is logged in.

* Windows Server: Fixed rendering problems when multiple CopyRects were combined with normal updates. That could caused distortions that never updated even with full-screen polling active.

* Windows Server: Added new "-silent" command-line option which modifies the behavior of -install, -reinstall and -remove options and makes them not show informational windows on successful execution. Note that -silent should precede other respective options in the command line.

* Windows Server: LastRect, XCursor and RichCursor pseudo-encodings were not properly enabled if they preceded true encodings in the SetEncodings protocol message.

* Windows Viewer: Fixed integer overflow vulnerabilities reported by Core Security Technologies. A specially modified VNC server could currupt the heap of the connected viewer causing its crash or malfunction.

* Windows Viewer: TightVNC Viewer version 1.3.9 saved only successful connections in the list of recently visited VNC servers. Now we save unsuccessful connections too so that users would not ever have to re-type server names after connection failures. Also, several other enhancements were made to the code which handles the list of recent connections.

* Windows Viewer: Fixed a bug with not loading passwords from saved .vnc files correctly if the first byte of their encrypted representation was zero.

* Windows Viewer: Fixed problems under Windows Vista where Windows taskbar could remain visible above the full-screen window.

* Windows Viewer: Fixed a problem with decoding JPEG rectangles wider than 2048 pixels.

* Windows Viewer: Fixed a bug with not saving log file name correctly on using the Browse button.

* Windows Viewer: Usability improvements in the "New Connection" dialog.

* Windows Packaging: Improved installer and uninstall utility. In this version, self-installing executable will not try to install service in Windows Vista. Improved uninstall program always removes the WinVNC service if it was previously installed.

* Unix Server: Applied fixes for 64-bit Linux issues, a patch from Russel Miranda.

* Unix Server: Made the vncserver script read configuration from files (system-wide /etc/tightvncserver.conf and user-specific $HOME/.vnc/tightvncserver.conf).

* All viewers: Allow configuring JPEG quality level regardless of the preferred encoding set. This makes sense because TightVNC Servers can transmit video data as JPEG even if Tight is not the preferred encoding.

* Java viewer: Fixed a bug that caused NullPointerException when connecting to any VNC server not supporting TightVNC protocol extensions.

* Java viewer: Fixed a bug with ignoreCursorUpdates option in 24-bit color mode caused the viewer to disconnect. Thanks to Damien Mascre for pointing out the issue.

* Java viewer: PORT parameter is not required any more, now it defaults to 5900.

* Java viewer: Do not defer update requests by default, to minimize delays in screen updates.

* Java viewer: Improvements in reporting statistics on disconnect.

* Java viewer: Added debugging parameters (DEBUG_XU, DEBUG_CU) that allow using the viewer as a tool for measuring VNC server performance.

* Other minor improvements and bugfixes.

- All platforms: Added support for the standard RFB protocol version
3.8 with TightVNC extensions.

- All platforms: Made "host:port" parsing maximally compatible with
VNC4. Interpreting a number in host names like somehost:5900 as an
actual port number if it's not in the range [0..99].

- Windows Server: Various user interface enhancements - changes in
GUI labels, tray icon with a red border when incoming connections
are not possible for any reason, more information in the tray icon
tip, smarter logic in displaying the Properties dialog, and more.

- Windows Server: Fixed a problem introduced in TightVNC 1.3.8 -
default passwords were not respected if user passwords were not
set.

- Windows Server: Slightly improved handling of passwords. One of
the notable changes is that now it's enough to enter a view-only
password without providing primary password.

- Windows Server: Fixed problems with running WinVNC service and
Terminal Services. When a Remote Desktop (RDP) client connected to
the console, WinVNC showed black screen and did not restore normal
operations even on disconnection of that RDP client. Now, we
always share the console correctly, and disable simultaneous RDP
and VNC sessions. The changes were ported from VNC 4.1.2.

- Windows Server: Better way of simulating Ctrl+Alt+Del. There are
reports that this solves the problem with greyed username and
password fields on Windows 2003 Server (bug #887617).

- Windows Server: Bugfix for the bug #1109102: attempt to restart
the machine remotely via TightVNC led to disconnect if there was
some non-saved data, and further connections were rejected.

- Windows Viewer: Multiple selection now works in file transfers,
thanks to developers at Novell and personally Rohit Kumar.

- Windows Viewer: The viewer terminated silently when the server
dropped connection right after accepting it. Now we report such
errors.

- Windows version source archive: Included project files for
compiling with Visual C++ 2005 Express Edition. Also, all required
libraries are now included within the source distribution.

- Other improvements and bugfixes, see ChangeLog files within the
distribution for more details.

- Win32 server: Fixed major problem with disconnecting clients on screen locking, user logoff and logon, in the service mode.
- Win32 server: Added support for DFMirage driver direct screen access mode (from DemoForge LLC).
- Win32 server: Added support for multiple monitors (from DemoForge LLC).
- Win32 server: Improved layout and functionality of the Properties dialog.
- Win32 server: More accurate password handling - now the server code tries to distinguish between "empty" and "unset" passwords better.
- Win32 server: New -shareall, -shareprimary and -sharearea command-line options, working similarly to the -sharewindow option.
- Win32 server: Fixed problems with restoring desktop wallpaper.
- Win32 viewer: Fixed bug with not enabling JPEG compression by default.
- Win32 viewer: Fixed bug with not setting proper size of the viewer window.
- Unix server: Port numbers are now calculated modulo 65536 with vncviewer's -listen option. That makes it possible to listen on TCP ports under 5900.
- Java viewer: Automatic encoding selection based on measuring current network throughput.

- Fixed the problem with "olemainthreadwndname not responding" in service mode under Windows NT 4.0. Under that OS, the TightVNC service could hang on logoff.
- Removed the code for "desktop optimizations" that was rather harmful than useful. Hopefully, this should fix problems with crashing Delphi application. Also this should prevent settings like font smoothing always set to true on disconnect.
- Fixed the issue with port number edit boxes that were labeled incorrectly in the Properties dialog.
- Disallowing clipboard transfers in view-only mode.
- Fixed the problem with carriage return/linefeed conversion of clipboard data.
- Fixed the problem with wallpaper being removed only after completing the initial screen transmission.
- Minor improvements in the File Transfers dialog.
- More context help messages in Properties and File Transfers dialogs.
- Other improvements and bugfixes, see ChangeLog files within the distribution for more details.