-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: arm64
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 e50bc7bfd520f1c51bf2a843eae9baeb1f6d582e 1063004 xrdp-dbgsym_0.10.1-3.1+deb13u2_arm64.deb
 060cd261be2666319b8fe658d287d3cd6eaba81e 7261 xrdp_0.10.1-3.1+deb13u2_arm64-buildd.buildinfo
 c1d73bd184af280156b2d650228c944804468fd7 594500 xrdp_0.10.1-3.1+deb13u2_arm64.deb
Checksums-Sha256:
 185057dc6f579ea6b2c63985e2ee859b8853b386394e5d1c718bb88fce2904ac 1063004 xrdp-dbgsym_0.10.1-3.1+deb13u2_arm64.deb
 2b3618d186bb25fcbc1764ab1162adaf70ad36f1a151e1a7531d048970bb1c13 7261 xrdp_0.10.1-3.1+deb13u2_arm64-buildd.buildinfo
 c7e6c031ce0d509b7e7f16a6dc90752ea47a7ffd6383c222f6eab42859c95217 594500 xrdp_0.10.1-3.1+deb13u2_arm64.deb
Files:
 29f21ed2ebd70a96073f1799f1a611a1 1063004 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_arm64.deb
 6974f54d107a4999a84ced02320708ff 7261 net optional xrdp_0.10.1-3.1+deb13u2_arm64-buildd.buildinfo
 58aad4f68bd303e20acc131efcc293ab 594500 net optional xrdp_0.10.1-3.1+deb13u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=cWQd
-----END PGP SIGNATURE-----