MGASA-2026-0566

Dashboard / Vulnerabilities / MGASA-2026-0566

MGASA-2026-0566

Summary: Updated xrdp package fixes security vulnerabilities

Details: lib_palette_update Heap Buffer Overflow & RCE. (CVE-2026-41252) lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass. (CVE-2026-41521) Channel Data Forwarding Fixed-Size Buffer Overflow. (CVE-2026-44178) XRDP is vulnerable to a server timing attack, leading to user enumeration. (CVE-2026-42218) Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verification. (CVE-2026-44978) Pre-auth infinite loop via totalLength=0 in TS_SHARECONTROLHEADER. (CVE-2026-54538) Malformed Confirm Active capability sets cause out-of-bounds reads. (CVE-2026-55238) No authentication required with Xvnc backend. (CVE-2026-55626) Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY). (CVE-2026-55639) Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control). (CVE-2026-55645)

References: https://advisories.mageia.org/MGASA-2026-0566.html, https://bugs.mageia.org/show_bug.cgi?id=35945, https://lists.fedoraproject.org/archives/list/[email protected]/message/5ZQ6QE47Z3SMILAAOHQ2RKDQFJOK2M4X/, https://lists.fedoraproject.org/archives/list/[email protected]/message/JWYOEVBA3574FXNPXKDS3FPNCQ3SDAOM/, https://lists.debian.org/debian-security-announce/2026/msg00380.html