RealVNC Changelog

What's new in RealVNC 5.3.2

Jun 22, 2016
  • Windows:
  • FIXED: VNC Server now correctly captures a desktop set to span multiple monitors with different DPI settings.
  • UNIX:
  • FIXED: Setting the poll parameter to a number of milliseconds (for example 200) in an appropriate configuration file (such as ~/.vnc/config.d/vncserverui-virtual for Virtual Mode) or /etc/vnc/common.custom (for all modes) now works around copy and paste issues in X applications such as gVim.

New in RealVNC 5.3.1 (Mar 31, 2016)

  • All platforms:
  • If VNC Viewer is minimized while in full screen mode, it no longer automatically returns to full screen mode for any reason.
  • Setting the advanced AlterShiftWithMods VNC Server parameter to 0 allows VNC Server to inject key combinations such as Ctrl+C, even if the connected VNC Viewer user has Caps Lock enabled.
  • FIXED: Importing a connection into VNC Address Book now also imports that connection’s VNC Server password, if one has been saved.
  • FIXED: The name and location of VNC Server’s private RSA key can now be successfully configured via the RsaPrivateKeyFile parameter.
  • Windows:
  • FIXED: Installing VNC Server in a non-default location no longer causes connected VNC Viewer users to see a black screen.
  • UNIX:
  • SELinux policy modules are automatically registered on Red Hat-compatible distributions (version 5.0+ only) if SELinux is enabled during installation or upgrade, meaning the vncserver-x11-serviced and vncserver-virtuald daemons, and printing, work out-of-the-box. On Debian-compatible distros, or if SELinux is enabled later, you can register the policy modules manually.

New in RealVNC 5.3.0 (Dec 17, 2015)

  • All platforms:
  • Providing VNC Server and VNC Viewer are both version 5.3, connections use the very latest RFB 5 protocol for enhanced security, with updated cipher suites and support for Perfect Forward Secrecy.
  • VNC Server with an Enterprise or a Personal license can restrict the IP addresses on which it listens for connections, reducing the attack surface. Note the InTransports parameter has been removed, which means VNC Server with a Free license can no longer listen on just IPv4 addresses, or on just IPv6 addresses.
  • VNC Viewer can send keep alive messages to VNC Server in order to maintain (perhaps minimized) connections that might otherwise be considered idle by routers or gateways, and unexpectedly terminated. Conversely, the same mechanism can clean up connections that have terminated, perhaps due to network failure.
  • VNC Server has a new screen capture architecture that is both more robust and responsive. Users should see fewer disconnections and reconnections when transiting between desktop and login screens. System administrators should be aware of a new vncagent binary and process.
  • Screen capture on Windows 8+ computers using DirectX is now more efficient, giving a better user experience. As part of this work, the UpdateMethod parameter has been renamed CaptureMethod on all platforms, and has new defaults that make choosing the optimal capture method easier.
  • Configuring security for VNC Server at the command line or using policy is now simpler using new, separate, more intuitive Authentication and Encryption parameters. On upgrade, SecurityTypes and UserPasswdVerifier values are mapped appropriately unless a VNC password is mandated using policy.
  • The vncpasswd utility now has flags that make specifying a VNC password for VNC Server in all modes easier. In addition, running the utility without a flag now shows the help rather than defaulting to VNC Server in User Mode.
  • The Password parameter is now included in policy template files so VNC Server with an Enterprise license can be remotely provisioned with a VNC password. To obtain a password in the correct obfuscated format, run vncpasswd -print.
  • Windows:
  • Support for Windows 10.
  • VNC Viewer can send media keys such as Play and Volume Up to VNC Server.
  • VNC Server can remap keys received from VNC Viewer, perhaps to inject a non-native character or control key.
  • UNIX:
  • Support for Ubuntu 15.04—15.10, Debian 8, Red Hat/CentOS 7, and Fedora 21—23. [ SE Linux restriction ]
  • By default, VNC Server in Service Mode now logs to the syslog USER facility, and the VNC Server in Virtual Mode daemon to the DAEMON facility, instead of to file (note other facilities are available).
  • VNC Server in Virtual Mode now checks up to 500 X display numbers for the next available display, up from 99. Note that X displays in the range 0-99 are mapped to ports 5900-5999 as before; subsequently, the mapping is as follows:
  • 100-199 (ports 7100-7199); 200-299 (ports 7300-7399); 300-399 (ports 7500-7599); 400-499 (ports 7700-7799).
  • Users in the sudo group can now authenticate to VNC Server in Service Mode with an Enterprise or a Personal license on Linux platforms out-of-the-box. This is in addition to users in the admin group and the root user.
  • Mac OS X:
  • Support for 10.11 El Capitan.
  • On 10.7+ computers, VNC Viewer can be made full screen in the same way as any other Mac app. Note this does mean the app window can no longer span multiple monitors. To do this, revert to legacy full screen mode.
  • VNC Server can remap keys received from VNC Viewer, perhaps to inject a non-native character or control key.
  • VNC Viewer can now send special keys such as Cmd+Tab and the Spotlight shortcut to VNC Server whenever the app window has focus, and not just in full screen mode.
  • By default, VNC Server in Service Mode now logs to syslog instead of to file.

New in RealVNC 5.2.3 (Feb 10, 2015)

  • UNIX:
  • FIXED: Re-installing or upgrading VNC on certain platforms no longer results in duplicate PAM entries that can prevent connections.
  • FIXED: The VNC Server in Virtual Mode daemon (vncserver-virtuald) no longer crashes the host computer if VNC parameters or Xvnc options in configuration files are specified in the wrong format.
  • Windows:
  • FIXED: Accept/reject prompts now appear correctly if a host computer user logs out while VNC Viewer users are connecting.
  • Mac OS X:
  • The TryLegacyCaptureMethod VNC parameter can be set to 1 if screen corruption is experienced when connected to headless servers running OS X 10.10 Yosemite.

New in RealVNC 5.2.2 (Dec 4, 2014)

  • NEW: Support for Ubuntu 14.10. Note that if you are using VNC Server in Virtual Mode, you will need to change the default desktop environment.
  • FIXED: VNC Server in Virtual Mode no longer crashes on low-color depth displays when a session is shared and a second user connects.

New in RealVNC 5.2.1 (Aug 27, 2014)

  • Fixed: The VNC Server status icon should now appear when you log in to the root user account on a host computer.

New in RealVNC 5.2.0 (Jun 9, 2014)

  • All platforms:
  • NEW: VNC is available in French, German, and Spanish. The appropriate language for the desktop of each user is automatically selected. This can be changed (if required) using the Locale VNC parameter.
  • VNC parameters that parse environment variables (such as LogDir) now resolve the syntax $$ to a literal $, for example to accommodate such a character in a folder name.
  • FIXED: The VNC Viewer chat interface no longer prevents a user account password being entered at the Login window or lock screen.
  • UNIX:
  • VNC Server in Service Mode (vncserver-x11-serviced) and the VNC Server in Virtual Mode daemon (vncserver-virtuald) can now be started using systemctl on Linux distributions that support systemd, such as the latest Fedora.
  • VNC Server now supports PAM session modules, and session actions in pam_umask.so, pam_limits.so, pam_env.so, and pam_unix.so are automatically referenced in /etc/pam.d/vncserver (or equivalent file).
  • Chat is no longer a separate application but rather merged into the vncserverui program. To configure chat using policy, edit the vncserverui- policy template file.
  • FIXED: VNC hosted on a network share no longer relies on the cacerts.pem file.
  • Mac OS X:
  • NEW: VNC Server in Service Mode can lock the computer or start the screensaver when the last VNC Viewer user disconnects (not available under OS X 10.4).
  • The VNC Chat.app no longer reads from the /Library/Preferences/com.realvnc.vncchat.plist file. To configure chat using policy, edit the vncserverui- policy template file.
  • FIXED: VNC Viewer no longer prevents media keys such as volume or brightness from affecting the client computer.

New in RealVNC 5.1.1 (Apr 8, 2014)

  • All platforms:
  • FIXED: An issue when setting the same port for VNC connections (RfbPort) and for VNC Viewer for Java downloads (HttpPort).
  • Windows:
  • Automatic update checks can now be controlled when installing VNC at the command line. More information.
  • FIXED: VNC Server no longer incorrectly reports that a standard license key is not valid for the current domain.
  • Mac OS X:
  • FIXED: Users can now connect if the display is asleep even if a password is required to wake the display.

New in RealVNC 5.1.0 (Dec 10, 2013)

  • All platforms
  • NEW: VNC Server can check whether critical software patches, and product updates to which you are entitled, are available to download from the RealVNC web site.
  • NEW: VNC Server publishes a more-memorable catchphrase than the unique signature on which it is based, detering man-in-the-middle attacks by making identity checks more intuitive for connecting users. (Enterprise and Personal only)
  • NEW: VNC applications can be configured remotely, and locked down to prevent change, using policy. Policy template files are available to download for distribution to target computers using a suitable mechanism, for example Group Policy under Windows. (Enterprise only)
  • NEW: Message boxes displayed when connections are unexpectedly terminated can now be suppressed using the HideCloseAlert VNC Viewer parameter, making scripting easier.
  • The VNC Server Options dialog has been made easier to use, and highlights features locked down by policy. For both VNC Server and VNC Viewer, it also simplifies the process of creating debug log files to send to RealVNC Technical Support.
  • The new Permissions VNC Server parameter replaces NtLogon_Config (Windows) and AllowedUsers/AllowedGroups (other platforms). Existing users, groups, and permissions are automatically upgraded. (Enterprise and Personal only)
  • The Permissions parameter now grants access to features in the following sets: f (full), d (default), v (view-only). More information. (Enterprise and Personal only)
  • The Permissions parameter now supports explicitly denying permission to use a feature, as well as allowing and not allowing that feature. Deny cannot be overridden by individual members of a group. (Enterprise and Personal only)
  • VNC Server logs are now directed to file at more appropriate locations, as determined by the new LogDir parameter. More information.
  • The VNC Server Information Center dialog now distinguishes between successful and unsuccessful connections on the Diagnostics page, which may give warning of a port sniffing or brute-force dictionary attack.
  • All instances of VNC Server running on a computer can be reconfigured without downtime using the vnclicense -reload command.
  • Single sign-on authentication is now easier to set up and benefits from new documention. (Enterprise only)
  • VNC parameters are now fully documented.
  • FIXED: Copying and pasting text from connected computers is now more reliable. See also the ServerClipboardGraceTime VNC Viewer parameter.
  • UNIX:
  • NEW: Support for Ubuntu 13.10, Debian 7 and Fedora 19.
  • NEW: The RootSecurity VNC Server parameter protects the system credentials of connecting users from observation by a VNC Server owner who is not root.
  • NEW: The VNC Server in Virtual Mode daemon (vncserver-virtuald) supports single sign-on authentication. (Enterprise only)
  • NEW: The VNC Server in Virtual Mode user interface can be hidden using the StartUI VNC Server parameter.
  • NEW: VNC Server in Virtual Mode can clean up stale sockets and release display numbers using the vncserver-virtual -clean command.
  • VNC Server no longer automatically authenticates users with locked or expired accounts. (Enterprise only)
  • VNC Server in Virtual Mode now creates a virtual desktop with a default color depth of 24 (32 bits-per-pixel).
  • The Permissions VNC Server parameter now accepts the ID of a group as well as its name. (Enterprise and Personal only)
  • Under AIX, PAM can be substituted for LAM more easily using the new UsePam VNC Server parameter.
  • The vnclicense utility can manage license keys in locations other than the default /etc/vnc using the new LicenseDir VNC parameter. This is especially useful when installing on a network share.
  • The man pages have been rewritten.

New in RealVNC 5.0.6 (Oct 10, 2013)

  • Windows:
  • Support for Windows 8.1.
  • The AutoLogonOverride VNC Server parameter enables connected users to hold down the Shift key while logging off in order to prevent the same user account being automatically logged back on.
  • Mac OS X:
  • Support for 10.9 (Mavericks)

New in RealVNC 5.0.5 (Mar 8, 2013)

  • FIXED: The VNC Server - File Transfer dialog now always appears.
  • The BlacklistTimeout VNC Server parameter now accepts a number of seconds between 1 and 2147483647.
  • Improvements to CUPS printing backend.

New in RealVNC 5.0.4 (Jan 30, 2013)

  • Text can now be copied and pasted in either direction if the connection was originally made to a computer at the login screen (that is, not yet logged on to a particular user account).

New in RealVNC 5.0.3 (Oct 8, 2012)

  • All platforms:
  • The mouse cursor snaps to a corner of the host computer's desktop if it exits the VNC Viewer window within a certain distance of a corner (configurable via the PointerCornerSnapThreshold parameter), making it easier to trigger hotspots under the latest operating systems (particularly Windows 8 and Mac OS X 10.8).
  • UNIX and Linux:
  • The VNC Server in Virtual Mode daemon (vncserver-virtuald) now respects the BlacklistThreshold and BlacklistTimeout parameters in order to prevent denial-of-service attacks.