UltraVNC 1.3.8.0 - Feedbacks

[Rudi De Vos]

Please use UltraVNC 1.3.8.1 with a CVE fix:
- viewtopic.php?t=37552

UltraVNC 1.3.8.0 (release)
- https://uvnc.com/products/uvnc-server.html
- https://uvnc.com/downloads/ultravnc.html
- https://uvnc.com/downloads/ultravnc/149 ... 3-8-0.html

Changelog since the previous stable build:
1.3.8.0
- Warning about unthrusted server can be disabled
- Trayiocon fix
- Multiple cursors when not selected fix
- Notification as OSD
- Border and black screen is not supported on all OS’s, added OS check
- Tight color issue fix
- Borde with OSD
- Border fix
- Update libs: libjpeg-turbo 2.1.2, xz 5.2.5, zipunzip 6.0
- Revert "update zipunzip 6.0"
- SDK update
- Fix loading options
- Installer update: Fixed some installer issues
* Silent is not needed
* Upgrade is not needed
* Plugins are installed with server/viewer
* The menu is always installed, the desktop icons are optional (like other installers do)

[WAJIM]

Supports XP or later
UltraVNC 1.3.8.0 distribution for 32-bit Windows XP or higher.

Really?

[SkyBeam]

Congratulations and many thanks for all the great enhancements and fixes!

I just did a quick validation and did not find any unexpected regressions.

[VNCHELP890]

Thanks.

In looking for this, I found it.

There seem to be a few cleanup items on your download page.

1. It still says latest is 1.3.6.0 at the top
2. There is a lot of white space.
3. 1.3.8.0 is dated December 15, 2021
4. I had a nice screenshot of these, with annotations, but it won't let us paste it in or upload?
5. Can't wait to download and install this. Fixing some of the issues, like adding to start menu, will be good.



Thanks.

[CPC]

Just an update... 1.3.8.0 looks good so far with no negative surprises in my daily use case.

I replaced version 1.3.4.2 32bit server in my single click reverse support program with version 1.3.8.0 32bit... and also switched to using the 1.3.8.0 viewer at my end. 1.3.8.0 seems to be working well with XP and newer operating systems 32 and 64 bit... running a mix of winvnc.exe 1.2.1.7 to 1.3.8.0 32 bit in single click reverse connections with and without SecureVNCplugin. Reverse connection, control, auto-reconnect, mouse and file transfer seem to be working as it should with 1.3.8.0 behaving the same as 1.3.4.2 from a user perspective in our environment. Taskmanager cpu usage seems the same/good.

Summary... A painless upgrade to 1.3.8.0 32bit for me.

Thanks to the UVNC team and those who help contribute via testing betas and feedback in this forum.
CPC

[ddbivens]

I have installed version 1.3.8.0 on a few hundred PCs. Several of these PCs are Windows 7 PCs and the install seemed to go as expected and I can remote into those PCs (that I have tested) from a Windows 7 PC. However on one Windows 7 PC when I ran the installer I got the following error message: " The program can't start because api-ms-win-core-version-l1-1-0.dll is missing from your computer. Try reinstalling the program to fix this problem."
I can run the viewer from this Windows 7 PC from I can't remote into this Windows 7 PC. I have tried reinstalling the program several times. I stopped getting the error message but I still can't remote into the PC.
[EDIT] After rebooting the windows 7 PC, I can now remote into it.

[user8446]

Just updated to v1.3.8 64bit server... went smooth with no issues. Thank you!

[Rudi De Vos]

Damm we need to make a 1.3.8.1.

There is an exploit that exist in all versions.
When someone make a custom plugin he can get admin access as normal user...

Just fixed it, just a few line of code but a new build is needed.
( thanks Qiang, to bring it to my attention)
Someone want todo a fast test ?

When update and released the CVE will be created.

[SkyBeam]

If you send the download link I can do some regression testing of course.
Isn't this the case for any plugin running in service context? IN fact the service should load plugins only from non-user-writeable folders (like program files) anyway, so restricted users cannot make the service load any code from folders where users do have write access.
If the user has admin rights to the installation folder he can also overwrite the binaries or any "valid" plugin.

Maybe I wait for the CVE for better explanation.

[VNCHELP890]

Not seeing 1.3.8.1 on the Downloads page yet.

[Rudi De Vos]

1.3.8.1 on hold
edit online

[VNCHELP890]

Looking at your other post, I'm guessing it is now "off hold".

Yes? Changelog?

[WoodyWoody]

The black screen was only partially resolved. Apparently is only happens when you have three monitors and connect to another computer.

This one issue keeps re-appearing on a very silent install/upgrade:

Select action
Setup was unable to automatically close all applications. It is recommended that you close all applications using files that need to be updated by setup before continuing.
Try again
Ignore the error and continue
Cancel installation

[Rudi De Vos]

changelog:
Just a few lines of code to maker sure the plugin is loaded from the ultravnc folder.

[VNCHELP890]

What is the current latest version people should install?

Is it 1.3.8.1 or 1.3.8.2?

I've got a mix, and noticed from a download that the installer looks different on 1.3.8.1 now, newer even than the 1.3.8.2 installer.

Which is better?

(Hint: A 1.3.8.3 with all fixes rolled in would solve this for now, until 1.3.9 can come out.)