-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: ppc64el
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 b1fa62b2ac3ebc1be053845eac95085469174116 1123844 xrdp-dbgsym_0.10.1-3.1+deb13u2_ppc64el.deb
 fc5eb3fe4fe3c38514c1ba6a61fa4a6072100c48 7276 xrdp_0.10.1-3.1+deb13u2_ppc64el-buildd.buildinfo
 dbad2854c5255cd4b423e709bc6930e78cab052b 660128 xrdp_0.10.1-3.1+deb13u2_ppc64el.deb
Checksums-Sha256:
 5f018eea8bbd382d9cdbe1b465fe66ee6d7511b1fb0cb8554cdd7f2e04e95150 1123844 xrdp-dbgsym_0.10.1-3.1+deb13u2_ppc64el.deb
 b62af1568b4a4f4b34ce0218f17a68f984b209430e4833f183329997d0cf1167 7276 xrdp_0.10.1-3.1+deb13u2_ppc64el-buildd.buildinfo
 c91d838ae5ec4ff442a361c28e83999214e742de3c249c365bead218ec0a66ec 660128 xrdp_0.10.1-3.1+deb13u2_ppc64el.deb
Files:
 0ac452655f2fe0f89818bc1f9554734f 1123844 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_ppc64el.deb
 c46264e6f1ef5895248b7f482012782f 7276 net optional xrdp_0.10.1-3.1+deb13u2_ppc64el-buildd.buildinfo
 4498ba3a10ce9ed80199b9fa2f7a967d 660128 net optional xrdp_0.10.1-3.1+deb13u2_ppc64el.deb

-----BEGIN PGP SIGNATURE-----
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=bDD+
-----END PGP SIGNATURE-----