-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: armhf
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 a3b338c6afe34b1afe7804fdc5c4d57ed79f8640 1059196 xrdp-dbgsym_0.10.1-3.1+deb13u2_armhf.deb
 23b61933efb4f5076262419cd33e3914a171e441 7143 xrdp_0.10.1-3.1+deb13u2_armhf-buildd.buildinfo
 85da8ab8ead5777239391271e4860263a83f81aa 554016 xrdp_0.10.1-3.1+deb13u2_armhf.deb
Checksums-Sha256:
 79aae8c44b2dd418ec82eae59fb6728fba26854f1be8e2b43272c64d5333844a 1059196 xrdp-dbgsym_0.10.1-3.1+deb13u2_armhf.deb
 37aae5b3212f1a49015c80fba2bab92031c38b845bb3b12956796c7e2700bac0 7143 xrdp_0.10.1-3.1+deb13u2_armhf-buildd.buildinfo
 00f321a6ecf4b60dbf9742129055a3396527b1aed6b6e73a189a6e59710b3d60 554016 xrdp_0.10.1-3.1+deb13u2_armhf.deb
Files:
 a706aac41ac8778e256e8b6aedd4e086 1059196 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_armhf.deb
 fff653c54611c20a370d0eeeaecc439f 7143 net optional xrdp_0.10.1-3.1+deb13u2_armhf-buildd.buildinfo
 21133504224fe116d2fde1b0cefab961 554016 net optional xrdp_0.10.1-3.1+deb13u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=6rTA
-----END PGP SIGNATURE-----