Advisories ยป MGASA-2026-0566

Updated xrdp package fixes security vulnerabilities

Publication date: 30 Oct 2026
Modification date: 30 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-41252 , CVE-2026-41521 , CVE-2026-44178 , CVE-2026-42218 , CVE-2026-44978 , CVE-2026-54538 , CVE-2026-55238 , CVE-2026-55626 , CVE-2026-55639 , CVE-2026-55645

Description

lib_palette_update Heap Buffer Overflow & RCE. (CVE-2026-41252)
lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR
Bypass. (CVE-2026-41521)
Channel Data Forwarding Fixed-Size Buffer Overflow. (CVE-2026-44178)
XRDP is vulnerable to a server timing attack, leading to user
enumeration. (CVE-2026-42218)
Unchecked FIPS padding length in standard RDP Security causes heap
out-of-bounds read in HMAC verification. (CVE-2026-44978)
Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER.
(CVE-2026-54538)
Malformed Confirm Active capability sets cause out-of-bounds reads.
(CVE-2026-55238)
No authentication required with Xvnc backend. (CVE-2026-55626)
Out-of-bounds read in GCC Conference Create Request CS_SECURITY
processing (xrdp_sec_process_mcs_data_CS_SECURITY). (CVE-2026-55639)
Out-of-bounds read in Client Control PDU processing
(xrdp_rdp_process_data_control). (CVE-2026-55645)

References

SRPMS

10/core