Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Fedora 43 xrdp Important Denial Of Service Risks Advisory 2026-952a486b39

fedora
Calendar Grey July 25, 2026
Scroller Fedora
Addressing critical vulnerabilities in xrdp on Fedora 43, including denial of service and potential information leak risks.
Fedora has released an update for xrdp, which enhances compatibility and addresses several security vulnerabilities ranging from denial-of-service to buffer overflows and improper ...

Summary

xrdp provides a fully functional RDP server compatible with a wide range

of RDP clients, including FreeRDP and Microsoft RDP client.

Update Information:

Update PAM file to better match modern reality.

Topics%20covered

Topics Covered

security advisory denial of service information leak fedora important xrdp

Change Log

* Sat Jul 18 2026 Bojan Smojver - 1:0.10.6.1-3 - Fix bug #2499948

References


[ 1 ] Bug #2502969 - CVE-2026-54538 xrdp: infinite loop denial-of-service vulnerability during RDP packet processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502969 [ 2 ] Bug #2502971 - CVE-2026-41521 xrdp: integer overflow leads to out-of-bounds read in vnc-any mode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502971 [ 3 ] Bug #2502973 - CVE-2026-44178 xrdp: heap-based buffer overflow in virtual channel forwarding [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502973 [ 4 ] Bug #2502974 - CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502974 [ 5 ] Bug #2502977 - CVE-2026-55626 xrdp: missing authentication when xrdp launches Xvnc in UNIX domain socket mode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502977 [ 6 ] Bug #2502978 - CVE-2026-55645 xrdp: out-of...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-952a486b39' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: xrdp
Product: Fedora 43
Version: 0.10.6.1
Release: 3.fc43
URL: http://www.xrdp.org/
Summary: Open source remote desktop protocol (RDP) server

Topics%20covered

Topics Covered

security advisory denial of service information leak fedora important xrdp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.