-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: i386
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 c4f385e993e1d8f40e22d818399e59cf084d026f 970440 xrdp-dbgsym_0.10.1-3.1+deb13u2_i386.deb
 e0b86aa87b812d401a52d628d02a2d4e2806e08d 7196 xrdp_0.10.1-3.1+deb13u2_i386-buildd.buildinfo
 06ddff1d2bd36db5f719ef84398176e7050509c4 656432 xrdp_0.10.1-3.1+deb13u2_i386.deb
Checksums-Sha256:
 bc9c81ea904eb8e077184ca7d1785741d94a8c79272280ac7bc602c539781f8b 970440 xrdp-dbgsym_0.10.1-3.1+deb13u2_i386.deb
 57149558103484f9b752bf580af33517113c24a9bb49dd62810e37fcae93267e 7196 xrdp_0.10.1-3.1+deb13u2_i386-buildd.buildinfo
 cef8f54803640bb32d4a3644bfe844a9cf6c87e9b436cab7d7138bafb3036dd2 656432 xrdp_0.10.1-3.1+deb13u2_i386.deb
Files:
 e3593f4d3c77bb722422957169374e8f 970440 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_i386.deb
 4b882fb3c659100357ffac01eb524582 7196 net optional xrdp_0.10.1-3.1+deb13u2_i386-buildd.buildinfo
 f5e228d89fa84c08d546f8740dce4229 656432 net optional xrdp_0.10.1-3.1+deb13u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Jgrb
-----END PGP SIGNATURE-----