| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: xrdp-devel | Distribution: openSUSE Tumbleweed |
| Version: 0.10.6 | Vendor: openSUSE |
| Release: 1.3 | Build date: Thu Jun 18 03:28:47 2026 |
| Group: Development/Libraries/C and C++ | Build host: reproducible |
| Size: 85215 | Source RPM: xrdp-0.10.6-1.3.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/neutrinolabs/xrdp | |
| Summary: Development files for xrdp | |
This package contains the development headers for xrdp.
Apache-2.0 AND GPL-2.0-or-later
* Thu Jun 18 2026 Yifan Jiang <yfjiang@suse.com>
- Recommend pipewire-module-xrdp to bridge pipewire audio.
* Wed Jun 17 2026 Yifan Jiang <yfjiang@suse.com>
- Generate key/cert pair to enable ssl security layer by default
+ Add xrdp-ensure-cert.sh
+ Add xrdp-ensure-cert.patch
* Wed Jun 10 2026 Yifan Jiang <yfjiang@suse.com>
- Update sesman.ini:
+ Introduce MaxDisplayNumber=1000 to support SUSE large
X11DisplayOffset=200
- Update xrdp.ini:
+ Align the logo section with the latest upstream
- Rebase patches:
+ xrdp-support-KillDisconnected-for-Xvnc.patch
+ xrdp-avahi.diff
- Drop upstreamed patches:
+ xrdp-systemd-services.patch
+ xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
+ xrdp-Add-function-to-get-user-information-by-UID.patch
+ xrdp-fix-username-in-env.patch
* Wed Jun 10 2026 Yifan Jiang <yfjiang@suse.com>
- Update to version 0.10.6:
+ Security Fixes
* Resolved CVE-2026-32105, CVE-2026-32107, CVE-2026-32623,
CVE-2026-32624, CVE-2026-33145, CVE-2026-33516,
CVE-2026-33689, and CVE-2026-35512.
+ Drop upstreamed patches
* xrdp-CVE-2026-35512.patch
* xrdp-CVE-2026-32624.patch
* xrdp-CVE-2026-32107.patch
* xrdp-CVE-2026-32623.patch
* xrdp-CVE-2026-33145.patch
* xrdp-CVE-2026-33689.patch
* xrdp-CVE-2026-32105-1-fips-slowpath.patch
* xrdp-CVE-2026-32105-2-fips-fastpath.patch
* xrdp-CVE-2026-32105-3-nonfips-slowpath.patch
* xrdp-CVE-2026-32105-4-nonfips-fastpath.patch
+ New Features
* Added support for xorgxrdp bug fixes
neutrinolabs/xorgxrdp#249 and neutrinolabs/xorgxrdp#342
(#3721).
+ Bug Fixes
* Honour pass_shell_as_env setting only if the user
explicitly sets a shell (#3725).
* Blocked attempts to create a NULL authentication file
when utilizing VNC over UDS (#3727).
* Corrected layout alignment issues with the Brazilian
ABNT2 keyboard mapping (#3728, #3736).
* Addressed a 'file exists' installation block when
overwriting an existing xrdp setup (#3780).
+ Changes for Packagers or Developers
* The unfinished PIV smartcard support is now disabled by
default due to potential security risks; it can be
manually re-enabled via --enable-smartcard for
non-production environments (#3759).
+ General & Deprecations
* The use_vsock parameter in xrdp.ini is deprecated. Use
'port=vsock://' instead.
- Changes since 0.10.1:
+ Update to version 0.10.5:
- Security Fixes
* Resolved CVE-2025-68670: Fixed improper bounds checking
on domain string lengths to prevent stack-based buffer
overflows.
- New Features
* Added support for running the xrdp daemon completely
unprivileged via the service manager (#3599, #3603).
* Enabled recording of TLS pre-master secrets to
facilitate easier network packet captures (#3617).
* Added FuseRootReportMaxFree parameter to mitigate 'no
free space' computation bugs in various file managers
(#3639).
* Allowed alternate shell names to be passed to startwm.sh
via environment variables for tighter system policy
controls (#3624, #3651).
* Updated fallback Xorg path hooks in sesman.ini to
support newer Linux distributions (#3663).
* Integrated a Slovenian keyboard layout mapping (#3668,
[#3670]).
* xrdpapi: Introduced a native binding hook to monitor
session connection and disconnection events (#3693).
- Bug Fixes
* Allowed empty X11 UTF8_STRING blocks to be copied and
pasted to the clipboard system (#3580, #3582).
* Patched a v0.10.x regression that broke connections to
VNC servers lacking ExtendedDesktopSize encoding support
(#3540, #3584).
* Fixed a v0.10.x regression impacting PAM group
evaluation logic (#3594).
* Resolved protocol inconsistencies with the [MS-RDPBCGR]
specification block (#3608).
* Cleaned up uninitialized data references inside the
verify_user_pam_userpass.c module (#3638).
* Fixed intermittent daemon crashes triggered when the RFX
encoder is actively resized (#3590, #3644).
* Corrected a GFX engine regression that disrupted proper
operation of the JPEG encoder sub-system (#3649).
* Fixed a file management regression where the xrdp PID
file was unexpectedly deleted (#3650).
* Ensured VNC ports specified directly by the user are not
overwritten when bypassed by sesman (#3674).
* Fixed a 0.9.x regression where connections failed if the
FreeRDP client passed the /workarea parameter (#3618,
[#3676]).
* Corrected a crash occurring when a display resize event
is triggered while drdynvc is disabled (#3672, #3680).
* Fixed getgrouplist() compatibility to ensure successful
compilation on macOS environments (#3575).
* Addressed various static analysis warnings raised by
Coverity (#3656) alongside documentation tweaks (#3665).
- Internal Changes
* Cleared an unnecessary sys/signal.h header include that
triggered compilation warnings on MUSL-C toolchains
(#3679).
+ Update to version 0.10.4.1:
- Bug Fixes
* Fixed a critical regression that prevented xorgxrdp
v0.10.4 backend pairings from functioning properly with
this version release (#3561).
+ Update to version 0.10.4:
- New Features
* Introduced the vmconnect configuration parameter in
xrdp.ini to expose additional virtualization security
tracking features when operating inside Hyper-V virtual
environments (#3524).
* Integrated Latvian keyboard layout support (#3511,
[#3519]).
- Bug Fixes
* Refined systemd initialization detection logic on
Debian-derived operating systems (#3497, #3502).
* Resolved an interoperability bug where xrdp sessions
failed when brokered by Quest/OneIdentity Safeguard for
Privileged Sessions (#3498, #3507).
* Fixed a startup race condition inside chansrv that
prevented the service from being cleanly terminated on
exit (#3482).
* Addressed a potential double-free hazard present during
chansrv exit routines (#3546).
* Rectified several Coverity-identified static analysis
warnings (#3508).
- Internal Changes
* Upgraded the embedded TOML-C99 parser dependency to the
latest upstream state (#3530).
+ Update to version 0.10.3:
- General Announcements & Core Behavioral Shifts
* Introduced experimental utmp/wtmp session tracking
support. Actions are logged solely during session
creation/destruction.
- New Features
* Added configuration support to explicitly declare the
thread pool count assigned to the x264 compression
encoder (#3366, #3367).
* Provided a mechanism to substitute colon characters (:)
passed inside client share names with alternate
characters (#3389).
* Integrated a Hungarian keyboard layout configuration
mapping (#3424, #3430).
* Optimized keyboard fallback routing structures inside
xorgxrdp to handle complex multi-variant maps like
Brazil ABNT2 (#3478).
* Introduced a more secure 'Xvnc over Unix Domain Socket'
session mode for Enterprise FIPS environments (#3453).
- Bug Fixes
* Resolved several memory leak conditions (#3380, #3388).
* Implemented error handling path fixes for environments
containing a mis-installed or broken openh264 encoder
binary (#3405, #3432).
* Mitigated FIPS-compliant enterprise configuration errors
(Bug #2518) via the introduction of the new Unix Domain
Socket session architecture (#3453).
* Fixed a FreeBSD specific conflict where xrdp occasionally
attempted to claim display IDs already utilized by
active SSH X11-forwarding sessions (#3381, #3456).
* Fixed Coverity engine warnings (#3411, #3423) and
updated project documentation (#3403).
- Internal Changes
* Bumped the FreeBSD CI validation matrix platform up to
14.2 (#3427).
- Changes for Packagers or Developers
* Added configuration capability to customize the exact
subdirectory location for configurations (#3369).
* Packagers must explicitly append the --enable-utmp
compile flag to enable the experimental utmp framework
features.
+ Update to version 0.10.2:
- Highlights
* H.264 Graphics Remoting: Officially introduced H.264
video stream graphics compression encoding, substantially
lowering bandwidth utilization.
* Unprivileged Daemon Operation: Officially enabled support
to isolate the main xrdp daemon execution block under a
distinct, unprivileged user account.
- New Features
* Allowed FUSE filesystem mount configurations to execute
direct I/O routines, bypassing the kernel block cache
layer (#3260).
* Enabled compliant remote clients to entirely skip
virtual channel join handshakes (#3282).
* Added discrete frame capture interval configuration
items inside xrdp for both H.264 and RFX codecs
independently (#3317).
* Added statvfs system call passthrough capabilities on
the FUSE storage layer backend (#3304).
* Allowed packagers to define a custom target log path
for the chansrv file logger (#3344).
* Integrated Czech keyboard layout support (#3348, #3358).
- Bug Fixes
* Enhanced the channel redirector pipeline by removing
rigid filename length caps and improving compatibility
hooks for FreeRDP clients (#3165, #3194).
* Fixed an accounting bug that led to misreported graphic
cache allocation limits (#3212).
* Clarified the inline documentation descriptions for the
Policy variable inside sesman.ini (#3235).
* Repaired a regression that broke connection pathways
targeting non-resizable VNC environments (#3242).
* Patched a chansrv functionality breakage affecting
standalone VNC sessions, introduced during the socket
directory transition (#3283).
* Corrected AltGr modifier mapping behaviors on standard
Spanish keyboard layouts (#3313).
* Resolved a FUSE layer conflict preventing the KDE Dolphin
file manager from successfully writing files back onto
mapped client drives (#3300).
* Added explicit packaging inclusions for pam_limits.so on
Debian and downstream targets (#3347).
- Internal Changes
* Updated internal CI code quality engines: cppcheck to
v2.15.0 and astyle to 3.4.14 (#3232, #3309, #3314).
* Dropped the legacy xrdp_sec_in_mcs_data() internal
function block (#3273).
- Changes for Packagers or Developers
* Modified the build sequence so xrdp.ini and sesman.ini
macro substitutions occur dynamically during compiling
(#3187, #3188).
* Elevated the baseline libfuse requirement to versions
strictly greater than > 3.1.0 (#3284).
+ Update to version 0.10.1:
- Security Fixes
* Unauthenticated RDP security scan finding / partial auth
bypass (no CVE).
- New Features
* Allowed client connection quality properties to
dynamically dictate selected GFX-RFX lossy compression
levels (#3183).
- Bug Fixes
* Fixed a regression inside the creation loop of the
chansrv FUSE directory hierarchy (#3088).
* Added missing systemd dependency entries targeting
network-online.target (#3088).
* Resolved a session listing processing race that caused
improper display allocations (#3088).
* Patched a memory fault (SEGV) caused during active GFX
display resizing actions (#3088).
* Resolved tracking bugs associated with the US Dvorak
keyboard layout specification (#3088).
* Fixed a regression preventing clipboard image payloads
from being pasted into LibreOffice sheets and documents
(#3102, #3120).
* Corrected a GFX negotiation failure condition when the
max_bpp parameter configuration was set too low (#3118,
[#3122]).
* Fixed a coordinate placement bug causing multi-monitor
GFX displays to misalign upon minimize or maximize
actions (#3075, #3127).
* Fixed missing file inclusion targets within release
packaging tarball generation routines (#3149, #3150).
* Corrected logical processing for the session selection
assignment rule when set to policy 'I' (#3167, #3171).
* Cleared an unneeded licensing handshake phase that
caused handshake interruptions for FIPS-compliant RDP
clients (#3132).
* Extended maximum resolution display limitations to allow
client screens wider than 4096 pixels (#3083).
- Internal Changes
* Bumped the base FreeBSD automated regression testing
platform instance to 13.3 (#3088).
* Wed Jun 03 2026 Yifan Jiang <yfjiang@suse.com>
- Enforce the security_layer to tls by default in xrdp.ini because
of CVE-2026-32105 (bsc#1262312), see:
https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-j2jm-c596-c5q3
* Wed May 27 2026 Yifan Jiang <yfjiang@suse.com>
- Temporary disable the fixes for CVE-2026-32105 as it brings
confusion when using freerdp as a client to connect in legacy rdp
protocol (bsc#1266233, bsc#1266325), see upstream discussion:
https://github.com/neutrinolabs/xrdp/issues/3808
* Wed May 20 2026 Yifan Jiang <yfjiang@suse.com>
- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
to be compatible with old gcc (e.g. the gcc in SLE 12).
* Sat May 16 2026 Yifan Jiang <yfjiang@suse.com>
- Add patches for security fixes:
* xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
CVE-2026-32105)
* xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
CVE-2026-32105)
* xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
CVE-2026-32105)
* xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
CVE-2026-32105)
* xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
* xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
* xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
* xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
* xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
* xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)
* Mon Feb 02 2026 Xiaoguang Wang <xiaoguang.wang@suse.com>
- update to 0.9.27:
* xrdp.ini manpage updated
* Unauthenticated RDP security scan finding/partial auth bypass
* CVE-2025-68670: Improper bounds checking of domain string
length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
* xrdp-memory-allocation-security-fix.patch
* xrdp-remove-unecessary-gmalloc.patch
* xrdp-safe-data-chunk-reassembly.patch
* xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
* xrdp-CVE-2022-23468.patch
* xrdp-CVE-2022-23478.patch
* xrdp-CVE-2022-23479.patch
* xrdp-CVE-2022-23480.patch
* xrdp-CVE-2022-23481.patch
* xrdp-CVE-2022-23482.patch
* xrdp-CVE-2022-23483.patch
* xrdp-CVE-2022-23484.patch
* xrdp-CVE-2022-23493.patch
* xrdp-CVE-2022-23477.patch
* xrdp-CVE-2023-40184.patch
* xrdp-CVE-2023-42822.patch
* xrdp-CVE-2024-39917.patch
* xrdp-CVE-2025-68670.patch
* Fri Jan 30 2026 Xiaoguang Wang <xiaoguang.wang@suse.com>
- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
(bsc#1257362 CVE-2025-68670).
* Sat May 03 2025 Andreas Stieger <andreas.stieger@gmx.de>
- update to 0.9.26:
* Fall back to IPv4 if IPv6 capable but don't have an IPv6
address set
* Remove tcutils channel from xrdp.ini
* Remove duplicate DEBUG output
* Fix drive redirection regression
* Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
* Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
* touchpad inertial scrolling
* If the client announces support for the Image RemoteFX codec it
is logged
- includes changes from 0.9.24:
* Checking group membership should now work better on systems
using directory services
* Pasting more than 32K characters of text to the clipboard now
succeeds
* An incompatibility with FreeRDP 2.11.2 in the drive redirector
has been fixed
- Rebase xrdp-systemd-services.patch
* Fri Jan 24 2025 Yifan Jiang <yfjiang@suse.com>
- Enforce no login screen if require_credentials is set
(bsc#1227769)
+ Add xrdp-CVE-2024-39917.patch
+ Rebase xrdp-fate318398-change-expired-password.patch
* Tue Jan 14 2025 Dominique Leuenberger <dimstar@opensuse.org>
- Fix escaping of commented out patch: with RPM 4.20, %patch
becomes a standard, expandable macro, that can span more than one
line. Commenting out with #%patch can thus lead to invalid
results.
* Fri May 24 2024 Thorsten Kukuk <kukuk@suse.com>
- Drop initscripts-legacy support [jsc#PED264]
- Drop rc<service> symlinks [jsc#PED-264], [jsc#PED-266]
* Mon Feb 26 2024 Dominique Leuenberger <dimstar@opensuse.org>
- Use %patch -P N instead of deprecated %patchN.
* Fri Dec 08 2023 Daike Yu <yu.daike@suse.com>
- Update xrdp-CVE-2023-42822.patch
+ fix bsc#1217759: xrdp login screen does not show any text
* Thu Nov 30 2023 Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
support. Launch all desktop session in a dbus-run-session context to
avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
cleanly since xrdp 0.9.18. Reconsider its usage.
* Tue Nov 21 2023 Daike Yu <yu.daike@suse.com>
- xrdp-CVE-2023-42822.patch (bsc#1215803)
+ unchecked access to font glyph info
* Wed Oct 18 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Update to version 0.9.23.1:
+ Security fix: Unchecked access to font glyph info
(CVE-2023-42822).
- Changes from version 0.9.23:
+ General announcement: Running xrdp and xrdp-sesman on separate
hosts is still supported by this release, but is now
deprecated. This is not secure. A future v1.0 release will
replace the TCP socket used between these processes with a Unix
Domain Socket, and then cross-host running will not be
possible.
+ Security fix: Improper handling of session establishment errors
allows bypassing OS-level session restrictions
(CVE-2023-40184).
+ Bug fixes:
- Environment variables set by PAM modules are no longer
restricted to around 250 characters.
- X11 clipboard clients now no longer hang when requesting a
clipboard format which isn't available.
* Tue Sep 12 2023 Daike Yu <yu.daike@suse.com>
- xrdp-CVE-2023-40184.patch (bsc#1214805)
+ restriction bypass via improper session handling
* Thu Aug 03 2023 Linnaea Lavia <linnaea@lavia.moe>
- Update to version 0.9.22
+ New features
- Empty passwords are no longer automatically passed through to sesman for authentication
- Don't try to listen on the scard socket if it isn't there
- The directory where PAM configuration files are installed can now be set with --with-pamconfdir
- Sesman can now be configured to ignore alternate shells passed from the client
- Allow longer UserWindowManager strings
- openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
- VNC backend session now supports extra mouse buttons 6, 7 and 8
+ Bug fixes
- Minor documentation fixes
- Memory management fixes to list module
- Fix some noise when MP3/AAC are in use and some logging improvements
- Fix potential NULL dereferences in chansrv
- An erroneous free in the smartcard handling code has been removed
- Passwords are no longer left on the heap in sesman
- Set permissions on pcsc socket dir to owner only
+ Security fixes
- CVE-2022-23468
- CVE-2022-23477
- CVE-2022-23478
- CVE-2022-23479
- CVE-2022-23480
- CVE-2022-23481
- CVE-2022-23482
- CVE-2022-23483
- CVE-2022-23484
- CVE-2022-23493
- Drop upstreamed patches:
xrdp-CVE-2022-23468.patch
xrdp-CVE-2022-23477.patch
xrdp-CVE-2022-23478.patch
xrdp-CVE-2022-23479.patch
xrdp-CVE-2022-23480.patch
xrdp-CVE-2022-23481.patch
xrdp-CVE-2022-23482.patch
xrdp-CVE-2022-23483.patch
xrdp-CVE-2022-23484.patch
xrdp-CVE-2022-23493.patch
xrdp-make-pamconfdir-configurable.patch
xrdp-update-pam.d-path.patch
* Mon Jul 10 2023 Josef Cejka <jcejka@suse.com>
- Convert username exported to env variables to canonical form
to prevent issues with different username and domain formats (bsc#1211740)
+ xrdp-Add-function-to-get-user-information-by-UID.patch
+ xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
+ xrdp-fix-username-in-env.patch
* Tue Jun 06 2023 Dominique Leuenberger <dimstar@opensuse.org>
- Do not call %stop_on_removal and %restart_on_update in
%preun/%postun: those macros would require at least some
%parameters and actually are the same as the already used
%%service_del_preun and %service_del_postun.
* Wed Mar 08 2023 Yifan Jiang <yfjiang@suse.com>
- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
(gh#neutrinolabs/xrdp!2552 bsc#1208121).
* Wed Mar 08 2023 Yifan Jiang <yfjiang@suse.com>
- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
implementation and introduce --with-pamconfdir at build time
(gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch
* Mon Feb 13 2023 Yifan Jiang <yfjiang@suse.com>
- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
configuration file in the vendor directory /usr/lib/pam.d/
(bsc#1208121).
* Mon Jan 16 2023 Stefan Schubert <schubi@suse.com>
- Migration of PAM settings to /usr/lib/pam.d.
* Tue Jan 10 2023 Daike Yu <yu.daike@suse.com>
- xrdp-CVE-2022-23477.patch (bsc#1206301)
+ Buffer over flow in audin_send_open() function
/usr/include/ms-erref.h /usr/include/ms-fscc.h /usr/include/ms-rdpbcgr.h /usr/include/ms-rdpeclip.h /usr/include/ms-rdpedisp.h /usr/include/ms-rdpefs.h /usr/include/ms-rdpegdi.h /usr/include/ms-rdpele.h /usr/include/ms-rdperp.h /usr/include/ms-smb2.h /usr/include/painter.h /usr/include/rfxcodec_common.h /usr/include/rfxcodec_decode.h /usr/include/rfxcodec_encode.h /usr/include/xrdp_client_info.h /usr/include/xrdp_constants.h /usr/include/xrdp_rail.h /usr/include/xrdp_sockets.h /usr/lib64/pkgconfig/rfxcodec.pc /usr/lib64/pkgconfig/xrdp.pc
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Aug 3 00:14:01 2026