-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: amd64
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 e7806d986ebe202a8e6cc90010bc57bb00147f8f 1104552 xrdp-dbgsym_0.10.1-3.1+deb13u2_amd64.deb
 72400cac53570baaab35f3a4e5da4a8474ca0129 7298 xrdp_0.10.1-3.1+deb13u2_amd64-buildd.buildinfo
 52a942523925003cc5762584c2ada6abe0e6cca9 621236 xrdp_0.10.1-3.1+deb13u2_amd64.deb
Checksums-Sha256:
 e0174682dcb7108ddab7af5b6bff0a829cadd7060e68195fd5db770fc49db2de 1104552 xrdp-dbgsym_0.10.1-3.1+deb13u2_amd64.deb
 7f7ef21d23d83dc18f7530fa58e7bfad5290d2c470f9c86822ca1a62bd20a027 7298 xrdp_0.10.1-3.1+deb13u2_amd64-buildd.buildinfo
 f786f5d230d200862ec204d12d447c229f284dc313c466abd9de6b082a9f0409 621236 xrdp_0.10.1-3.1+deb13u2_amd64.deb
Files:
 f6559b3adf56e7094f371ffe51c9e8b9 1104552 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_amd64.deb
 c964c22048b588cac4e4bbb92266ecf8 7298 net optional xrdp_0.10.1-3.1+deb13u2_amd64-buildd.buildinfo
 4c17fbadbbf922d8212c609642d2e1f0 621236 net optional xrdp_0.10.1-3.1+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=wIFC
-----END PGP SIGNATURE-----