• Core
  • Refactored client stream synchronization to exchange active features and session info (uptime) without notable delay and independent of framebuffer updates
• Plugins
  • Demo: show icon of primary demo feature as overlay icon to properly report if window or fullscreen demo is active on a client
• Linux
  • Fixed race condition when accessing socket of input-block-helper resulting in input devices not being locked reliably in Wayland sessions
• Windows
  • Fixed input device locking during screen lock / fullscreen demo
  • 3rdparty: OpenSSL: update to 3.5.8

Full Changelog: v4.11.1...v4.11.2

• Highlights

  • Greatly optimized pipewire-based VNC server for Wayland sessions on Linux
  • Refactored message queueing in demo mode server for better reliability and performance
  • Customizable text message titles

• Core, security & reliability

  • Hardened the VNC network protocol against malformed or oversized data, improving stability and security when connecting to computers (by @pioug43)
  • Improved authentication security for internal feature communication, protecting against unauthorized message injection (by @pioug43)
  • Significantly hardened the Linux authentication helper (used for logon checks) against memory inspection and environment tampering attacks
  • Linux: environment variables passed to a newly started Veyon Server (e.g. display, session bus, audio settings) are now validated and filtered to prevent injection of unsafe or spoofed values
  • Fixed the "Wildcard" pattern matching used in access control rules (e.g. *.example.org) to behave correctly and safely (by @pioug43)
  • Fixed broken config merge and key removal (#1155)
  • Fixed configuration migration between non-subsequent minor releases
  • Use Qt rather than OpenSSL directly for generating random data
  • Pipewire and headless VNC servers now listen on localhost only like all other internal VNC server backends
  • Updatedand rebased bundled libvncserver library to latest upstream version

• Master

  • Fixed delay in remote access windows to show screen updates immediately after opening the window
  • Fixed a crash that could occur when closing the "zoom" view for a computer (by @pioug43)
  • Fixed an issue where removing computers from the Spotlight view could accidentally remove the wrong computer

• Configurator

  • Fixed location table state and button management (#1150 by @NICourced)
  • Added a new setting, "Maximum simultaneous server connections" to protect the Veyon Server from being overwhelmed by too many connections at once (by @pioug43)
  • Check for a valid access control rule being selected when clicking "Move down"

• Plugins

  • Demo: fixed several issues where a slow or lagging student computer during a demo/broadcast could not (re)connect; the demo feature now recovers more smoothly and adapts image quality more accurately based on actual bandwidth usage
  • FileTransfer: users now see a clear error dialog if a file transfer fails, instead of the failure passing silently.
  • LDAP: Improved special-character handling when searching LDAP/Active Directory, fixing potential search failures with names containing special characters
  • LDAP: added "ou" (organizational unit) as an option for identifying location names
  • PowerControl: fixed missing confirmation dialog handling for delayed power-down
  • RemoteAccess: fixed memory leak
  • RemoteAccess: use lighter image compression resulting in less CPU usage on the clients at the cost of slightly more bandwidth
  • Screenshot: wait for initial framebuffer update when invoked immediately after connecting (e.g. via CLI/WebAPI) (#1067)
  • TextMessage: dialog now lets teachers set a custom title for the message window shown to students and defaults to "Message from " (#999, #1129, #1159 / by @pioug43)
  • TextMessage: always show and keep message dialog in front
  • WebAPI: added null-connection checks across several endpoints
  • WebAPI: fixed HTTPS setup logic

• CLI

  • Refactored handling of invalid or unknown commands and improved messages and fixed crash in certain error cases (#1152)
  • Fixed wrong order of arguments printed in the help for certain commands (#1156)

• Linux

  • Greatly improved performance of the Pipewire-based VNC server for Wayland sessions, resulting in much lower CPU usage
  • Fixed an issue where remote screen-share/demo sessions could occasionally miss part of the screen after resizing
  • Improved reliability of user session detection and reduced console error spam in non-standard environments

• Windows

  • Fixed a possible crash/leak when repeatedly installing or reinstalling the Veyon service
  • Fixed incorrect detection of the active virtual desktop, which could affect window focus behavior on some systems
  • Fixed potential memory issues in the Windows Event Log integration
  • 3rdparty: UltraVNC: include fixes for certain VDI environments
  • 3rdparty: OpenLDAP: update to 2.6.14

Full Changelog: v4.11.0...v4.11.1

• Core
  • FeatureWorker: improve security by adding authentication mechanism to only accept connections from workers with matching tokens (reported by @priyanshukumar397)
  • Improved LibVNCServer integration to share code across VNC server backends in common libraries
  • 3rdparty: LibVNCServer: update to 42494999e6492aaab9c1db785ecd293ef10b3aed
• Plugins
  • FileTransfer: add runtime source/destination path selection so users optionally can specify where to tranfer files to or where to collect files from (by @NICourced / #1143)
  • FileTransfer: fixed sizes and positions of dialogs
  • ScreenLock: don't lock the master computer when locking all screens and master computer is included in monitoring view (by @rautyrauty / #1133)
• Linux
  • Add Pipewire-based VNC server for Wayland sessions (additional contributions by by @NICourced / #1134, #1137, #1145, #1147)
  • Implement input device locking for Wayland sessions (by @NICourced / #1132)
  • Implement screen saver control for Wayland sessions (by @NICourced / #1132)
  • NixOS: fixed broken flake (by @H4K0N42 / #1138)
• Windows
  • Fix memory leaks and improve code quality by using RAII pattern for all kinds of Windows resources
  • 3rdparty: FFmpeg: update to 8.1.2
  • 3rdparty: OpenSSL: update to 3.5.7
  • 3rdparty: libjpeg-turbo: update to 3.2.0
  • 3rdparty: UltraVNC: update to 1.8.2.4

Full Changelog: v4.10.4...v4.11.0

• Core
  • Improve robustness by using std::vsnprintf() instead of sprintf()/snprintf()
  • Add various size checks when receiving usernames, signatures and tokens
• Master
  • Fixed performance regression introduced with improved thumbnail layouting in 4.10.3
  • Added support for extending guest user identities with prefix or suffix
• Plugins
  • Demo: don't lock the master computer when sharing a user's screen fullscreen (#1126)
• Linux
  • Added Nix flake and NixOS module
• Windows
  • 3rdparty: UltraVNC: update to 1.8.2.3

• Core
  • Cache authorized user groups from configuration
• Configurator
  • Auto-increment default names for new objects (#1123)
  • Hide x11vnc parameters label in standard view (#1125)
• Master
  • Improved mechanism for layouting thumbnails to always display the whole caption even for long user and/or device names
  • Optimized icon size auto adjust
  • Defer initial icon size auto adjust until application window is fully visible
• Plugins
  • FileTransfer: only collect from devices with logged in users
  • FileTranser: indicate 100% progress if finished with no files to be collected
  • FileTransfer: show number of files to be collected in 2nd column
  • LDAP: add hint on configuration for FreeIPA (#1122)
  • LDAP: update bundled kldap library to fix several issues related to memory allocation failures
  • UltraVNC: make sure to load user32.dll and shcore.dll from the Windows system directory only
  • WebAPI: make the plugin build explicit via WITH_WEBAPI (#1124)
• Linux
  • Add Fedora 44 packages
  • Add Ubuntu 26.04 packges
  • Drop Fedora 42 packages
  • Prepared API for upcoming Wayland support for Linux
• Windows
  • Added advanced device locking options for the screen lock feature - touch screens and touch pads are now temporarily disabled at the device level to suppress gesture handling
  • Improved mechanism for querying full user name - fixes missing full/display names for Azure AD users
  • Improved error handling and resource cleanup in several functions
  • Various optimizations and resiliency improvements
  • Build all binaries without LTO (link time optimization) to fix crashes on certain CPUs
  • 3rdparty: UltraVNC: update to 1.8.2.2 (includes fix for CVE-2026-3787 / CWE-428)
  • 3rdparty: libjpeg-turbo: update to 3.1.4.1
  • 3rdparty: libpng: update to 1.6.58
  • 3rdparty: OpenSSL: update to 3.5.6

Full Changelog: https://github.com/veyon/veyon/compare/v4.10.2..v4.10.3

• Master
  • Strip domain from displayed user login names if full name is not available
• Service
  • Added placeholder to user identification dialog
• CLI
  • Improved space handling for running command file (#1104)
• Linux
  • Fixed CI to build proper release packages (with optimizations and including translations) (#1102)
• Windows
  • Added block sleep key when screen is locked (#1103)
  • 3rdparty: OpenLDAP: update to 2.6.13
  • 3rdparty: Qt: update to 6.10.3

Full Changelog: https://github.com/veyon/veyon/compare/v4.10.1..v4.10.2

• Master
  • Show short tooltips in icons only mode
• Configurator
  • Order of locations and computers can now be changed with new move buttons (thanks to @pgilfernandez)
• Plugins
  • FileTransfer: allow configuration of up to three grouping attributes when collecting files for greater flexibility
  • LDAP: list computers of all locations or groups matching a certain name - fixes empty locations if there are multiple locations (e.g. OUs) with the same name
• Linux
  • Drop openSUSE Leap 15.6 packages
• Windows
  • Fix all Veyon applications crashing at exit due to threading issue in Qt 6.9+ – fixes faulty error message when importing configuration during installation (#1099)
  • Refactored key event handling in VNC-based remote control views – now the local keyboard layout always defines which keys are sent while the remote keyboard layout has no influence - fixes errors when transmitting characters at the 3rd keyboard level (AltGr) such as @ or € in European keyboard layouts or cyrillic characters in general (#1098, #940, #956, #779, #701)
  • 3rdparty: libpng: update to 1.6.55
  • 3rdparty: OpenSSL: update to 3.5.5
  • 3rdparty: Qt: update to 6.10.2 with more threading-related patches

Full Changelog: https://github.com/veyon/veyon/compare/v4.10.0..v4.10.1

• New features
  • Added new feature to collect files from remote computers
  • Added option to request user identification for guest sessions (enable at configuration page "Master" at the very bottom in advanced view mode)
• Master
  • Refactored main toolbar to resize itself and wrap buttons dynamically
• Plugins
  • LDAP Basic got renamed to LDAP/AD since the commercial LDAP Pro add-on has been retired
  • Allow logging in users remotely without a password
• Linux
  • Added options for customizing delays between simulated key presses when logging in users
• Windows
  • Rebase build environment to Debian 13 / GCC 14
  • Improved management and monitoring of the Veyon Server process to restart it more reliably on unexpected shutdown - fixes issues where computers were accessible only after restarting the Veyon Service
  • Veyon Server no longer shuts down when using the builtin UltraVNC server parallel to the official UltraVNC service
  • 3rdparty: Qt: update to 6.10.2 including bugfix for TLS-related performance regression (https://codereview.qt-project.org/c/qt/qtbase/+/606906)
  • 3rdparty: libpng: update to 1.6.54

Full Changelog: v4.9.8...v4.10.0

• General
  • Improved compatibility with Qt 6.10
  • Make log directory handling more secure (prevent symlink/junction abuse and add full path validation, #1075)
• Master
  • Auto-adjust icon size when switching computer positioning mode
  • Fixed enforcing designated mode (i.e. screen lock) if system tray icon is disabled in the service configuration
  • Allow sorting computers by user's surname (#1034, #1045)
• Plugins
  • LDAP: fixed MAC address retrieval when 1:1 mapping 1:1 of OUs to locations is enabled.
• Linux
  • Add Fedora 43 packages
  • Add openSUSE Leap 16.0 packages
  • Drop Fedora 41 packages
• Windows
  • Disable interfering windows handling by default since it caused troubles in various environments
  • 3rdparty: libpng: update to 1.6.53
  • 3rdparty: libjpeg-turbo: update to 3.1.2
  • 3rdparty: OpenSSL: update to 3.5.4

Full Changelog: https://github.com/veyon/veyon/compare/v4.9.6..v4.9.7

• General:
  • Improved compatibility with Qt 6.9 and 6.10
• Plugins
  • Demo: calculate internal bandwidth limit according to network speed and link type (i.e. use half the bandwidth of 100M/1G/2.5G Ethernet links and quarter the bandwidth of wireless links)
  • PowerControl: modernized Wake-on-LAN implementation and added debug messages
• Linux:
  • Add Debian 13 packages
  • Add RHEL 10 packages
  • Drop Ubuntu 20.04 packages
• Windows:
  • 3rdparty: libpng: update to 1.6.50
  • 3rdparty: libjpeg-turbo: update to 3.1.1
  • 3rdparty: OpenSSL: update to 3.5.2

Full Changelog: https://github.com/veyon/veyon/compare/v4.9.6..v4.9.7