| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: xrdp | Distribution: openSUSE Tumbleweed |
| Version: 0.9.27 | Vendor: openSUSE |
| Release: 1.2 | Build date: Mon Feb 2 03:59:30 2026 |
| Group: System/X11/Utilities | Build host: reproducible |
| Size: 2289469 | Source RPM: xrdp-0.9.27-1.2.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/neutrinolabs/xrdp | |
| Summary: Remote desktop protocol (RDP) server | |
A terminal server, capable of accepting connection from rdesktop and Microsoft's own terminal server / remote desktop clients.
Apache-2.0 AND GPL-2.0-or-later
* Mon Feb 02 2026 Xiaoguang Wang <xiaoguang.wang@suse.com>
- update to 0.9.27:
* xrdp.ini manpage updated
* Unauthenticated RDP security scan finding/partial auth bypass
* CVE-2025-68670: Improper bounds checking of domain string
length leads to Stack-based Buffer Overflow (bsc#1257362)
* Sat May 03 2025 Andreas Stieger <andreas.stieger@gmx.de>
- update to 0.9.26:
* Fall back to IPv4 if IPv6 capable but don't have an IPv6
address set
* Remove tcutils channel from xrdp.ini
* Remove duplicate DEBUG output
* Fix drive redirection regression
* Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
* Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
* touchpad inertial scrolling
* If the client announces support for the Image RemoteFX codec it
is logged
- includes changes from 0.9.24:
* Checking group membership should now work better on systems
using directory services
* Pasting more than 32K characters of text to the clipboard now
succeeds
* An incompatibility with FreeRDP 2.11.2 in the drive redirector
has been fixed
- Rebase xrdp-systemd-services.patch
* Tue Jan 14 2025 Dominique Leuenberger <dimstar@opensuse.org>
- Fix escaping of commented out patch: with RPM 4.20, %patch
becomes a standard, expandable macro, that can span more than one
line. Commenting out with #%patch can thus lead to invalid
results.
* Fri May 24 2024 Thorsten Kukuk <kukuk@suse.com>
- Drop initscripts-legacy support [jsc#PED264]
- Drop rc<service> symlinks [jsc#PED-264], [jsc#PED-266]
* Mon Feb 26 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Use %patch -P N instead of deprecated %patchN.
* Thu Nov 30 2023 Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
support. Launch all desktop session in a dbus-run-session context to
avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
cleanly since xrdp 0.9.18. Reconsider its usage.
* Wed Oct 18 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 0.9.23.1:
+ Security fix: Unchecked access to font glyph info
(CVE-2023-42822).
- Changes from version 0.9.23:
+ General announcement: Running xrdp and xrdp-sesman on separate
hosts is still supported by this release, but is now
deprecated. This is not secure. A future v1.0 release will
replace the TCP socket used between these processes with a Unix
Domain Socket, and then cross-host running will not be
possible.
+ Security fix: Improper handling of session establishment errors
allows bypassing OS-level session restrictions
(CVE-2023-40184).
+ Bug fixes:
- Environment variables set by PAM modules are no longer
restricted to around 250 characters.
- X11 clipboard clients now no longer hang when requesting a
clipboard format which isn't available.
* Thu Aug 03 2023 Linnaea Lavia <linnaea@lavia.moe>
- Update to version 0.9.22
+ New features
- Empty passwords are no longer automatically passed through to sesman for authentication
- Don't try to listen on the scard socket if it isn't there
- The directory where PAM configuration files are installed can now be set with --with-pamconfdir
- Sesman can now be configured to ignore alternate shells passed from the client
- Allow longer UserWindowManager strings
- openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
- VNC backend session now supports extra mouse buttons 6, 7 and 8
+ Bug fixes
- Minor documentation fixes
- Memory management fixes to list module
- Fix some noise when MP3/AAC are in use and some logging improvements
- Fix potential NULL dereferences in chansrv
- An erroneous free in the smartcard handling code has been removed
- Passwords are no longer left on the heap in sesman
- Set permissions on pcsc socket dir to owner only
+ Security fixes
- CVE-2022-23468
- CVE-2022-23477
- CVE-2022-23478
- CVE-2022-23479
- CVE-2022-23480
- CVE-2022-23481
- CVE-2022-23482
- CVE-2022-23483
- CVE-2022-23484
- CVE-2022-23493
- Drop upstreamed patches:
xrdp-CVE-2022-23468.patch
xrdp-CVE-2022-23477.patch
xrdp-CVE-2022-23478.patch
xrdp-CVE-2022-23479.patch
xrdp-CVE-2022-23480.patch
xrdp-CVE-2022-23481.patch
xrdp-CVE-2022-23482.patch
xrdp-CVE-2022-23483.patch
xrdp-CVE-2022-23484.patch
xrdp-CVE-2022-23493.patch
xrdp-make-pamconfdir-configurable.patch
xrdp-update-pam.d-path.patch
* Tue Jun 06 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Do not call %stop_on_removal and %restart_on_update in
%preun/%postun: those macros would require at least some
%parameters and actually are the same as the already used
%%service_del_preun and %service_del_postun.
* Wed Mar 08 2023 Yifan Jiang <yfjiang@suse.com>
- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
(gh#neutrinolabs/xrdp!2552 bsc#1208121).
* Wed Mar 08 2023 Yifan Jiang <yfjiang@suse.com>
- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
implementation and introduce --with-pamconfdir at build time
(gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch
* Mon Feb 13 2023 Yifan Jiang <yfjiang@suse.com>
- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
configuration file in the vendor directory /usr/lib/pam.d/
(bsc#1208121).
* Mon Jan 16 2023 Stefan Schubert <schubi@suse.com>
- Migration of PAM settings to /usr/lib/pam.d.
* Tue Jan 10 2023 Daike Yu <yu.daike@suse.com>
- xrdp-CVE-2022-23477.patch (bsc#1206301)
+ Buffer over flow in audin_send_open() function
/etc/xrdp /etc/xrdp/km-00000406.ini /etc/xrdp/km-00000407.ini /etc/xrdp/km-00000409.ini /etc/xrdp/km-0000040a.ini /etc/xrdp/km-0000040b.ini /etc/xrdp/km-0000040c.ini /etc/xrdp/km-00000410.ini /etc/xrdp/km-00000411.ini /etc/xrdp/km-00000412.ini /etc/xrdp/km-00000414.ini /etc/xrdp/km-00000415.ini /etc/xrdp/km-00000416.ini /etc/xrdp/km-00000419.ini /etc/xrdp/km-0000041d.ini /etc/xrdp/km-00000807.ini /etc/xrdp/km-00000809.ini /etc/xrdp/km-0000080a.ini /etc/xrdp/km-0000080c.ini /etc/xrdp/km-00000813.ini /etc/xrdp/km-00000816.ini /etc/xrdp/km-0000100c.ini /etc/xrdp/km-00010409.ini /etc/xrdp/km-19360409.ini /etc/xrdp/pulse /etc/xrdp/pulse/default.pa /etc/xrdp/reconnectwm.sh /etc/xrdp/rsakeys.ini /etc/xrdp/sesman.ini /etc/xrdp/startwm.sh /etc/xrdp/xrdp.ini /etc/xrdp/xrdp_keyboard.ini /usr/bin/xrdp-dis /usr/bin/xrdp-genkeymap /usr/bin/xrdp-keygen /usr/bin/xrdp-sesadmin /usr/bin/xrdp-sesrun /usr/lib/pam.d/xrdp-sesman /usr/lib/systemd/system/xrdp-sesman.service /usr/lib/systemd/system/xrdp.service /usr/lib64/xrdp /usr/lib64/xrdp/libcommon.so /usr/lib64/xrdp/libcommon.so.0 /usr/lib64/xrdp/libcommon.so.0.0.0 /usr/lib64/xrdp/libmc.so /usr/lib64/xrdp/libscp.so /usr/lib64/xrdp/libscp.so.0 /usr/lib64/xrdp/libscp.so.0.0.0 /usr/lib64/xrdp/libvnc.so /usr/lib64/xrdp/libxrdp.so /usr/lib64/xrdp/libxrdp.so.0 /usr/lib64/xrdp/libxrdp.so.0.0.0 /usr/lib64/xrdp/libxrdpapi.so /usr/lib64/xrdp/libxrdpapi.so.0 /usr/lib64/xrdp/libxrdpapi.so.0.0.0 /usr/lib64/xrdp/libxup.so /usr/sbin/xrdp /usr/sbin/xrdp-chansrv /usr/sbin/xrdp-sesman /usr/share/fillup-templates/sysconfig.xrdp /usr/share/licenses/xrdp /usr/share/licenses/xrdp/COPYING /usr/share/man/man1/xrdp-dis.1.gz /usr/share/man/man5/sesman.ini.5.gz /usr/share/man/man5/xrdp.ini.5.gz /usr/share/man/man8/xrdp-chansrv.8.gz /usr/share/man/man8/xrdp-genkeymap.8.gz /usr/share/man/man8/xrdp-keygen.8.gz /usr/share/man/man8/xrdp-sesadmin.8.gz /usr/share/man/man8/xrdp-sesman.8.gz /usr/share/man/man8/xrdp-sesrun.8.gz /usr/share/man/man8/xrdp.8.gz /usr/share/xrdp /usr/share/xrdp/ad24b.bmp /usr/share/xrdp/ad256.bmp /usr/share/xrdp/cursor0.cur /usr/share/xrdp/cursor1.cur /usr/share/xrdp/sans-10.fv1 /usr/share/xrdp/xrdp24b.bmp /usr/share/xrdp/xrdp256.bmp /usr/share/xrdp/xrdp_logo.bmp /var/log/xrdp-sesman.log
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Jul 24 15:27:28 2026