-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: armel
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 bdfbfd68134f9b20bd6c43100015e5a86307339b 1041428 xrdp-dbgsym_0.10.1-3.1+deb13u2_armel.deb
 acfa48fb255222ec553483b03e071811e8e23c5f 7129 xrdp_0.10.1-3.1+deb13u2_armel-buildd.buildinfo
 744b676b90b45ca1744571082e01c23cb193873c 551684 xrdp_0.10.1-3.1+deb13u2_armel.deb
Checksums-Sha256:
 bdad5785031458c1121a44c0662999e07467d92272f62398ab2b53e150f33053 1041428 xrdp-dbgsym_0.10.1-3.1+deb13u2_armel.deb
 71531b0d8b701f2b860bd6d3d0a65723f4ffa6b2c8dc1f1560395a007e1c6b5a 7129 xrdp_0.10.1-3.1+deb13u2_armel-buildd.buildinfo
 18d68bd4aca71fbe1df619298c7b2f6d6577ca64cffe11c908e372fb9fd2dea8 551684 xrdp_0.10.1-3.1+deb13u2_armel.deb
Files:
 e85955a4c458e8753e1d1b8a46b2f6bd 1041428 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_armel.deb
 c3171ac67fce99526763a4f72fd9d43d 7129 net optional xrdp_0.10.1-3.1+deb13u2_armel-buildd.buildinfo
 a9df5c760a404e95308a46ece181faa5 551684 net optional xrdp_0.10.1-3.1+deb13u2_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmqNq6sACgkQG5VHrWJm
wgdXvRAAxRNWzGIlq8Uvw4i1RSqwX6j9bhkmjg/bp/GML/wS6AftOixtYG+fnp57
LjYabuNkXQ9BSgRQKWlVokJTivV8pOwy1F1Sx5QnM5kGbFalc/of+DNJHYj0LS12
UlbDgnKY/Vnwm05YTZGvkHUMxpcz8Y1Lfv5G848m3fhuoZafUq6VCumvdVUBzcJC
VneqMMFt0Rk4SZde3rWaREBdZC2f1zPXSga/5i13fMjnlqXpxVKlcj58wTn+L/uh
O3BQv/rQrGL9gF7Ws1VkbCvh2XPaDF/R20AnrqvW4YuylTgDpLtLtCspojP0u/3o
BXQEaTzZ5UztH5x3dJiidE6YNMhh6+x80RaBo/e2RQaKX9hu2oXcXyGj+1lVDueN
hL0qtnIFMehV+SAxFC038iC4aqd4D/8LK4CREel4wtzJf0vKbxuSLVax9AXlo7en
bzuyDdEbs8zX/hWCNfWiuRiWuSmDWFSd1d947kKNzgLzN/kTBKdL1nWwVH907ob4
kCGcdi3BbVrSJS/VtmPpxup4wVShcmxcRMeV7IYkNSVTY5uI2RBlY18yhkbOH2VP
Jg9im40wJkx2ZoDACsxu5v4N+riHvBBz5Tm+pYeeWNQ+qI9qDsUKgkk5HPVNHptw
Cz6D2ix10JOJotNRnLKa90UDK+Gc4ihhJ010x+e1NVrda3GxkUI=
=jP5/
-----END PGP SIGNATURE-----