-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 13 Aug 2026 14:14:56 +0530
Source: xrdp
Binary: xrdp xrdp-dbgsym
Architecture: s390x
Version: 0.10.1-3.1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Abhijith PA <abhijith@debian.org>
Description:
 xrdp       - Remote Desktop Protocol (RDP) server
Closes: 1134339
Changes:
 xrdp (0.10.1-3.1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload.
   * CVE-CVE-2026-32105: modify encrypted traffic in transit without
     detection (Closes: #1134339)
   * CVE-2026-32107: improper privilege management allow attacker to
     escalate privileges to root and execute arbitrary code.
   * CVE-2026-32623: heap-based buffer overflow vulnerability
   * CVE-2026-32624: heap-based buffer overflow vulnerability
   * CVE-2026-33145: authenticated remote user to execute arbitrary
     commands
   * CVE-2026-33516: out-of-bounds read vulnerability
   * CVE-2026-33689: out-of-bounds read vulnerability
   * CVE-2026-35512: a heap-based buffer overflow
   * CVE-2026-41252: missing bounds check in xrdp, which allows a
     heap-based buffer overflow
   * CVE-2026-41521: nteger overflow vulnerability
   * CVE-2026-42218: a timing side-channel vulnerability in the login
     interface
   * CVE-2026-44178: heap-based buffer overflow vulnerability
   * CVE-2026-44978: heap out-of-bounds read vulnerability
   * CVE-2026-54538: sending a specially crafted packet that forces the
     process into an infinite, CPU-bound loop
   * CVE-2026-55238: Denial of Service
   * CVE-2026-55639: exploit by specially crafted RDP malformed data
     and read out-of-bound data block.
   * CVE-2026-55645: out-of-bounds memory reads
Checksums-Sha1:
 277771b48d660fa9235df72dc693e89f2cf19302 1090580 xrdp-dbgsym_0.10.1-3.1+deb13u2_s390x.deb
 a5772bd7381520ddc277bf98a37909eb9b3a0ab7 7139 xrdp_0.10.1-3.1+deb13u2_s390x-buildd.buildinfo
 ad945c9438251db2858255b36df12970e562ae6b 631004 xrdp_0.10.1-3.1+deb13u2_s390x.deb
Checksums-Sha256:
 fb01f3d43f88c105fc11565960b7d58a6814063c7b4c671bfbc0dcd2b761460b 1090580 xrdp-dbgsym_0.10.1-3.1+deb13u2_s390x.deb
 bad89022799dab6429fd7d8cecbf42c6d344e8e7b91ce99938b3faaf458fe13f 7139 xrdp_0.10.1-3.1+deb13u2_s390x-buildd.buildinfo
 cd90f6b110f4ea4e04f12f4287522f4476fd41421f8a2a2d69bedba762a76a8f 631004 xrdp_0.10.1-3.1+deb13u2_s390x.deb
Files:
 5aa1c5c178c93b8a2701f33d12fdffc6 1090580 debug optional xrdp-dbgsym_0.10.1-3.1+deb13u2_s390x.deb
 7b6f271a39acef8ea5a92a96380b87b5 7139 net optional xrdp_0.10.1-3.1+deb13u2_s390x-buildd.buildinfo
 0a694e59ec28ec38a81dd67fadec838d 631004 net optional xrdp_0.10.1-3.1+deb13u2_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmqNrB8ACgkQvVOPI7pY
NpgU5Q/+Mv6QWoKshX1OQFVSm/1jcqeXRW0Y0Oe6Url8ckZuJCFe75VWoBuuT/1c
UHs3esCXSP8cQ7+UX/kAHOzHiTbHv1S7pP107jICfSWwpScFAMB3KBN95tz/lBwZ
X+CnuhB5DWMVE7kEY28SASr3EZoo2e8rK6FMHdk5owxjeFfisvOkXm829AKcovqS
qMBP0RCd+2dKQnKUaO1Q1ihlIqGRcpai6sOksKERbpzd4uirncSnIkexcsUcp/oK
8oxzEL8WOx51hOQDDLqKoIi4yF+upIZoAnmPt4Wbe5SB5NQK3sr8aAFK0fGJgD3g
V4n80YC6HnXgTIOUW3d2kXawZim9zTaHkR55tU+Uqz8yCtZY6AQ2poQEVj1R5seL
B/hgaEp506nQhgHvk5k64/LhxiJptd4xzA4uErOZn6+Y1IpSpJrLtkjdWsDFxD31
syCghBsA5QpOdKgqKM6A3jpe6fVAcI1Ii2oy+CVRDJhrmGM56/viZ9cZ+fR1A6U+
FSNxsOIC1iw80dKtNp/by8mTPcpy8UVdpmXFaJ8xjAr551rHGQS9kh0+4FwMJRdr
zW4CWU1GLMyu0BGYU7PFb/1VNxQxX7vqGA4toAJDsZsg01bH53tSSoJxXyncLUfh
PFQ+UlUUtle9JqjWcmjFjEZOHtN86eFgTVg7I3rSsFkcuwD7Guc=
=Zfh0
-----END PGP SIGNATURE-----