FreeRDP 3.32.0, the latest version of the open-source Remote Desktop Protocol implementation widely used on Linux and other platforms to connect to Windows systems, has been released with several client-side improvements and substantial security hardening.
One main addition is seamless Microsoft Entra/Azure integration for the SDL and xfreerdp clients on Linux when the required helper binaries are available.
RemoteApp support also gets attention. The SDL client now has basic beta RAIL support on both X11 and Wayland, allowing individual remote Windows applications to integrate more naturally into the local desktop instead of requiring a full remote desktop session.
The xfreerdp client receives additional RAIL fixes as well, including work aimed at preventing remote application windows from unexpectedly shrinking.
Hardware-accelerated video processing has been reworked. FreeRDP now supports generic FFmpeg-based hardware-accelerated encoding and decoding, replacing the previous VA-API-only implementation. The developers still consider the feature experimental, noting that graphics driver issues remain common.
USB redirection has been improved by correcting how interface indexes map to interface numbers, which the developers say should allow more devices to work properly.
Remote camera handling has been adjusted so camera streams stop when the remote side no longer requests frames. In practical terms, the camera LED should no longer remain active after closing the remote Windows application that was using it.
Moreover, FreeRDP 3.32 now fully supports the Early User Authorization Result PDU, so users not permitted to log in receive an appropriate authentication error instead of a less helpful generic network failure message.
For Wayland users, the wlfreerdp client now correctly releases shortcut inhibition when the mouse leaves the FreeRDP window. PulseAudio handling is more robust, allowing FreeRDP to better handle situations where the active audio device is disconnected or removed.
On the proxy side, the target certificate policy now defaults to denying certificates unless explicitly accepted, reversing the previous accept-unless-denied behavior. According to the developers, existing proxy configurations depending on the old default will need updating.
Finally, the FreeRDP team says numerous issues related to protocol violations and potential exploits were addressed following extensive code reviews and security reports.
FreeRDP 3.32 is available now from the project’s official release channels. For more information, see the release announcement.
