-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: riscv64
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-04) <buildd_riscv64-rv-manda-04@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 350cc93a1b04e3c54fe8cad71bdd54b546aaedaf 1051916 xrdp-dbgsym_0.10.1-3.1+deb13u2_riscv64.deb
 c4f6ec7c9aef730c3b20368e3fed99a704aa8bf4 7221 xrdp_0.10.1-3.1+deb13u2_riscv64-buildd.buildinfo
 413da525eab0c5b189660a7196f7cc8404fe83e4 943556 xrdp_0.10.1-3.1+deb13u2_riscv64.deb
Checksums-Sha256:
 dab85bd459ba34178299e7ae3bbfdf68959b422c30f85ac1dbcf5151a64ad02c 1051916 xrdp-dbgsym_0.10.1-3.1+deb13u2_riscv64.deb
 63bbbcaf7d409a516ef226cc6ef3219e43490a9c2656f2d799983a3d378d95a3 7221 xrdp_0.10.1-3.1+deb13u2_riscv64-buildd.buildinfo
 683bda9143c2c45980c4a4a17ae70070420ead0c9ec5ab76f4770556fea2aa7e 943556 xrdp_0.10.1-3.1+deb13u2_riscv64.deb
Files:
 9c3e19ee1eff2321645e0a90a935b6e7 1051916 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_riscv64.deb
 839065f893a8ab1dd4fb7e8fefeeb24b 7221 net optional xrdp_0.10.1-3.1+deb13u2_riscv64-buildd.buildinfo
 2f5497f21cdc4eabab7ca2303d5f9a40 943556 net optional xrdp_0.10.1-3.1+deb13u2_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=oCMg
-----END PGP SIGNATURE-----