Luxembourg, July 16th, 2024

NoMachine makes available updated packages for version 8 to provide some enhancements and fix a number of issues affecting earlier versions. The new packages ship OpenSSL libraries v3.0 to replace OpenSSL version 1.1.1w. The nxssh and nxsshd components for Windows still use OpenSSL version 1.1.1w, patched with security fixes imported from OpenSSL libraries v3.0. Due to this change, when updating multi-node environments it's necessary to upgrade first the nodes and then the server to ensure communications between them (see: https://kb.nomachine.com/AR07V01242).

Additionally, the NoMachine built-in web server, nxhtd, has been updated to Apache version 2.4.61 in order to fix the following CVEs which could potentially affect it:

From Apache version 2.4.61:

CVE-2024-39884, Apache HTTP Server: source code disclosure with handlers configured via AddType

From Apache version 2.4.60:

CVE-2024-38472, Apache HTTP Server on WIndows UNC SSRF
CVE-2024-38474, Apache HTTP Server weakness with encoded question marks in backreferences
CVE-2024-38475, Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path
CVE-2024-38476, Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

From Apache version 2.4.59:

CVE-2023-38709, HTTP response splitting
CVE-2024-24795, HTTP Response Splitting in multiple modules.

Details of these security fixes are available at https://downloads.apache.org/httpd/CHANGES_2.4.

The following enhancements have been implemented:

Providing hardware encoding on Intel GPUs via oneVPL
NoMachine sessions on Linux servers can use GPU-accelerated H.264 encoding provided by cards supporting the Intel VPL APIs.

Disabling auto-repeat for held down keys
A new configuration key, "Disable auto-repeat for held down keys", has been added to the player.cfg which permits the local system's client side key repeat to be ignored, without having to disable the key repeat for the whole system.

Always accept the host verification key provided by the remote host
There is now an option in the 'Edit connection' panel to automatically accept the new host identity key when the "Verify host identification" dialog is issued.

Support for H.264 hardware decoding in Chrome web sessions
It's now possible to enable H.264 also on Chrome by adding forcevp8=false in the web player URL or by adding the 'EnableForceVp8 0' key in server.cfg. H.264 is currently disabled by default on Chrome to prevent possible freezes occurring when using hardware decoding.

The list of trouble reports solved by this 8.12.12 release are:

TR12T10728 - The client window can't be minimized from fullscreen on macOS
TR07U10921 - White screen occurs when connecting to a KDE/Plasma Wayland desktop on Kubuntu
TR04R09620 - Sessions cannot be started because of 'descriptor out of range' error
TR05V11143 - Sudden termination of the NoMachine virtual desktop when using Emacs v29.3
TR06V11178 - Sometimes a timeout occurs when trying to resume a virtual desktop
TR05V11145 - In some cases it's not possible to retrieve session history on large dbs
TR02V11091 - Some keys are not correctly mapped on a Macbook external keyboard
TR04V11140 - Pop-up to authorize visitor users is not issued when the X server is not running
TR05V11158 - Cannot connect to the Enterprise Terminal Server if localhost is disabled
TR04V11131 - A leftover file from NoMachine uninstallation on Fedora 39 prevents the starting of other programs
TR03V11118 - Cannot open snap applications in a NoMachine virtual desktop after updating to snap v2.61.3
TR02V11080 - Message "SELinux is preventing systemd from ioctl access on the file /usr/lib/systemd/system/nxserver.service" is issued on RHEL 9.3
TR03V11111 - Audio doesn’t work when PulseAudio and PipeWire are both installed and PulseAudio is enabled
TR03V11114 - Cannot delete a rule by using the node name
TR03U10799 - Cannot disable copy&paste from remote to local on the node via profile rules
TR05V11150 - Cannot drag an object on the desktop by right click on macOS with Unity 3d
TR11S10403 - Authentication fails if user was added to NoMachine DB in the CMD or Powershell
TR06V11171 - MATE panels are missing in web sessions
TR04V11132 - In a web session, the application needs double-tap to gain focus again after swiping
TR10T10643 - Scrolling with the touchpad is too fast on Windows client
TR01V11068 - Network disks are displayed as available to connect when the session is started from a Windows client
TR05T10532 - The 'Login Greeting' dialog is not properly displayed
TR04V11128 - On Arch Linux the NoMachine server slows down the shutdown process
TR03V11110 - Can't connect to Sway desktop with Wayland on Arch Linux
TR05V11159 - HW encoding is not used when NVIDIA drivers are version 537 or later
TR04V11126 - A NoMachine virtual desktop is no longer accessible after transferring a file
TR07V11182 - Virtual desktop sessions cannot be recovered after license expiration
TR04V11135 - Values set on a per-users group basis doesn't work any longer after the upgrade to v8.11
TR05V11144 - The uninstall procedure of NoMachine is not executed properly on macOS Monterey 12.7

Supported Platforms

Windows 32-bit/64-bit 7/8/8.1/10/11
Windows Server 2008/2012/2016/2019/2022

Mac OS X Intel 64-bit 10.9 to 10.11/macOS Intel 10.12 to 13/macOS Apple Silicon 11/12/13/14

Linux 32-bit and 64-bit
RHEL 6.0 to RHEL 9
CentOS 6.0 to CentOS 8.5
CentOS Stream 8 to CentOS Stream 9
SLED 11 to SLED 15
SLES 11 to SLES 15
openSUSE 11.x to openSUSE 15.x
Fedora 10 to Fedora 40
Debian 5 to Debian 12
Ubuntu 8.04 to Ubuntu 24.04

Raspberry Pi 2 ARMv6/ARMv7
Raspberry Pi 3 ARMv6/ARMv7/ARMv8/
Raspberry Pi 4 ARMv7/ARMv8

ARMv7/ARMv8

Important Notice

In NoMachine version 8, UPnP/NAT-PMP is disabled by default in the Free Edition. To get access to your computer over the internet, NoMachine's UPnP/NAT-PMP port mapping must be enabled by hand ('Server settings -> Ports' -> Select the service and click on Configure); or alternatively, your router can be configured with the appropriate port-forwarding rule. When port-mapping/port-forwarding is enabled, remote NoMachine connections, including connection requests from guests via the Guest Desktop Sharing feature will be possible.

Download NoMachine Packages

You can download the latest packages suitable for your Operating System from the NoMachine Web site at the following URL:

https://www.nomachine.com/download

Customers with valid subscriptions should log in to their customer area and download the appropriate server package(s) for their subscription(s) from the 'Product Downloads' section.

Automatic updates

The automatic check for updates is scheduled to check our repositories every two days.

To update the free NoMachine package:

• - Open the NoMachine User Interface from your Programs Menu.
• - From the Machines panel click on 'Settings', then on 'Server' and finally on 'Updates'.
• - Then click on the 'Check now' button.

To update the NoMachine Enterprise Client immediately:

• - Click on 'Settings', from the Player panel click 'Updates'.
• - Then click on the 'Check now' button.

More information about the check for automatic updates is available here:

https://www.nomachine.com/AR05M00847

Manual package installation or update

Please follow the instructions to install the package or update your installation manually:

On Windows:

• - Download and save the EXE file.
• - Double click on the NoMachine executable file.
• - The Setup Wizard will take you through all steps necessary for installing or updating NoMachine.

On macOS:

• - Download and save the DMG file.
• - Double-click on the Disk Image to open it and double-click on the NoMachine program icon.
• - The Installer will take you through through all steps necessary for installing or updating NoMachine.

On Linux:

You can use the graphical package manager provided by your Linux distribution or update NoMachine by command line by following instructions below. If you don't have the sudo utility installed, log on as superuser ("root") and run the commands without sudo.

RPM

• - Download and save the RPM file.
• - Install the package by running:
  # rpm -ivh <pkgName>_<pkgVersion>_<arch>.rpm
  or
• - Update your NoMachine installation by running:
• # rpm -Uvh <pkgName>_<pkgVersion>_<arch>.rpm

DEB

• - Download and save the DEB file.
• - Install the package by running:
  $ sudo dpkg -i <pkgName>_<pkgVersion>_<arch>.deb
  or
• - Update your NoMachine installation by running:
• $ sudo dpkg -i <pkgName>_<pkgVersion>_<arch>.deb

TAR.GZ

• - Download and save the TAR.GZ file.
• - Install the package by running:
  $ cd /usr
  $ sudo tar xvzf <pkgName>_<pkgVersion>_<arch>.tar.gz
  $ sudo /usr/NX/nxserver --install
  or
• - Update your NoMachine installation by running:
  • $ cd /usr
  • $ sudo tar xvzf <pkgName>_<pkgVersion>_<arch>.tar.gz
  • $ sudo /usr/NX/nxserver --update
• If you are installing Enterprise Client or Node run respectively:
  • $ sudo /usr/NX/nxclient --update
  • $ sudo /usr/NX/nxnode --update

Documents

Installation and configuration guides for the NoMachine products are available at:

https://www.nomachine.com/all-documents

The NoMachine Development Team