Luxembourg, May 18th, 2021 - NoMachine makes available updated version 7 packages to fix issues affecting earlier releases and to consolidate some important security fixes including a security patch (CVE-2021-3472) released by the X.org project to fix input validation failures in the X server XInput extension.

In addition, a vulnerability recently discovered affecting NoMachine servers installations on Windows is included. Affected NoMachine packages for Windows are the free version of NoMachine, Enterprise Desktop and Cloud Server which could be exploited for local privileges escalation by means of DLL Search Order Hijacking. Exploitation is however only possible if system PATH variable contains a directory that is writable by non-admin users, which should not happen in normal conditions.

The full list of what is included is:

FR04S04157 - Assigning the first available Enterprise Desktop without reconnecting a user already logged-in
FR04S04162 - Patching X.Org code (CVE-2021-3472)

TR05S10236 - Possible local privileges escalation on Windows
TR04R09653 - After a period, users cannot any longer connect to Windows child servers because of a 'session negotiation failed' error
TR05S10233 - In an AD environment, users cannot connect to a new Windows node
TR03S10131- The NoMachine virtual desktop terminates with 'Unknown sequence number while processing queue'
TR03S10138 - Mouse pointer is offset on a physical Wayland desktop on multiple monitors
TR03S10164 - Problems when using DUO authentication in web sessions
TR04S10209 - Screen blanking doesn't work correctly in mirrored mode on macOS
TR05S10239 - Session fails with error "Maximum number of virtual sessions reached for user ..."
TR05S10231 - Sudden termination of the Connection Monitor after message 'Storing client credentials is not allowed'
TR05S10232 - The main server cannot log-in to the node when UserNXDirectoryPath is set
TR04S10198 - Under some circumstances, a file transferred in web session becomes corrupted
TR03S10129 - WebRTC sessions don't start with Chrome/Edge browsers v. 89

Supported Platforms

Windows 32-bit/64-bit XP/Vista/7/8/8.1/10

Windows Server 2008/2012/2016/2019

Mac OS X Intel 64-bit 10.7 to 10.11/macOS Intel 10.12 to 11.x

Linux 32-bit and 64-bit

RHEL 4 to RHEL 8
SLED 10 to SLED 15
SLES 10 to SLES 15
openSUSE 10.x to openSUSE 15.x
Mandriva 2009 to Mandriva 2011
Fedora 10 to Fedora 34
Debian 4.0 to Debian 10
Ubuntu 8.04 to Ubuntu 21.04

Raspberry Pi 2/3/4 ARMv6/ARMv7/ARMv8

Download NoMachine Packages

You can download the latest packages suitable for your Operating System from the NoMachine Web site at the following URL:

https://www.nomachine.com/download

Customers with valid subscriptions should log in to their customer area and download the "Production version".

Automatic updates

The automatic check for updates is scheduled to check our repositories every two days.

To update the free NoMachine package:

• - Open the NoMachine User Interface from your Programs Menu.
• - From the Machines panel click on 'Settings', then on 'Server' and finally on 'Updates'.
• - Then click on the 'Check now' button.

To update the NoMachine Enterprise Client immediately:

• - Click on 'Settings', from the Player panel click 'Updates'.
• - Then click on the 'Check now' button.

More information about the check for automatic updates is available here:

https://www.nomachine.com/AR05M00847

Manual package update

Please follow the instructions to update your installation manually:

On Windows:

• - Download and save the EXE file.
• - Double click on the NoMachine executable file.
• - As for the installation, the Setup Wizard will take you through all steps necessary for updating NoMachine.

On macOS:

• - Download and save the DMG file.
• - Double-click on the Disk Image to open it and double-click on the NoMachine program icon.
• - As for the installation, the Installer will take you through through all steps necessary for updating NoMachine.

On Linux:

You can use the graphical package manager provided by your Linux distribution or update NoMachine by command line by following instructions below. If you don't have the sudo utility installed, log on as superuser ("root") and run the commands without sudo.

RPM

• - Download and save the RPM file.
• - Update your NoMachine installation by running:

• # rpm -Uvh <pkgName>_<pkgVersion>_<arch>.rpm

DEB

• - Download and save the DEB file.
• - Update your NoMachine installation by running:

• $ sudo dpkg -i <pkgName>_<pkgVersion>_<arch>.deb

TAR.GZ

• - Download and save the TAR.GZ file.
• - Update your NoMachine installation by running:
• • $ cd /usr
  • $ sudo tar xvzf <pkgName>_<pkgVersion>_<arch>.tar.gz
  • $ sudo /usr/NX/nxserver --update
• If you are installing Enterprise Client or Node run respectively:
• • $ sudo /usr/NX/nxclient --update
  • $ sudo /usr/NX/nxnode --update

Documents

Installation and configuration guides for the NoMachine products are available at:

https://www.nomachine.com/all-documents

The NoMachine Development Team