Internal
Public Access
-
OrbitHub v2026.9.8.2 Stable
released this
2026-09-08 16:33:57 -06:00 | 17 commits to main since this releaseSame-day patch release for v2026.9.8.
Fixed
- RDP TLS certificate verification was completely disabled. Every RDP server's certificate was silently accepted, including a changed certificate — indistinguishable from an active MITM attack. RDP connections now use trust-on-first-use certificate verification (matching SSH's known-hosts behavior): first connections trust and store the certificate silently, and a changed certificate now correctly refuses the connection with a clear warning instead of connecting anyway.
Other
- Flatpak packaging prepared for Flathub submission: pinned reproducible git source, narrowed sandbox permissions (
--filesystem=home→--filesystem=~/.ssh), expanded AppStream metadata (screenshots, release info, developer/project URLs), and verified against Flathub's own linter. - Upgraded the Flatpak's KDE runtime to 6.11.
Known limitations
- All installers are unsigned (no purchased code-signing certificates yet), so first launch will trigger OS warnings:
- Windows: SmartScreen "Windows protected your PC" — click "More info" -> "Run anyway"
- macOS: Gatekeeper "unidentified developer" warning — right-click the app -> Open
- The Flatpak bundle contains only OrbitHub itself, not its runtime. Install the
org.kde.Platform6.11 runtime first if it's not already present:flatpak install flathub org.kde.Platform//6.11 - VNC support is not yet implemented (deferred to a later milestone)
See docs/PROGRESS.md for full milestone details.
Downloads