Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Fedora 44 xrdp Important Denial of Service Vuln 2026-9d3c766833

fedora
Calendar Grey July 25, 2026
Scroller Fedora
Enhance your knowledge on the xrdp security advisory for Fedora 44, focusing on critical updates addressing key vulnerabilities.
An update for xrdp, an open-source RDP server, addresses several security vulnerabilities and improves PAM file usage, enhancing compatibility with various RDP clients in Fedora 44...

Summary

xrdp provides a fully functional RDP server compatible with a wide range

of RDP clients, including FreeRDP and Microsoft RDP client.

Update Information:

Update PAM file to better match modern reality.

Topics%20covered

Topics Covered

security advisory denial of service fedora important infinite loop xrdp

Change Log

* Sat Jul 18 2026 Bojan Smojver - 1:0.10.6.1-3 - Fix bug #2499948

References


[ 1 ] Bug #2502969 - CVE-2026-54538 xrdp: infinite loop denial-of-service vulnerability during RDP packet processing [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502969 [ 2 ] Bug #2502971 - CVE-2026-41521 xrdp: integer overflow leads to out-of-bounds read in vnc-any mode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502971 [ 3 ] Bug #2502973 - CVE-2026-44178 xrdp: heap-based buffer overflow in virtual channel forwarding [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502973 [ 4 ] Bug #2502974 - CVE-2026-55639 xrdp: improper input validation in MCS data processing leads to potential information leak [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502974 [ 5 ] Bug #2502977 - CVE-2026-55626 xrdp: missing authentication when xrdp launches Xvnc in UNIX domain socket mode [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2502977 [ 6 ] Bug #2502978 - CVE-2026-55645 xrdp: out-of...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d3c766833' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: xrdp
Product: Fedora 44
Version: 0.10.6.1
Release: 3.fc44
URL: http://www.xrdp.org/
Summary: Open source remote desktop protocol (RDP) server

Topics%20covered

Topics Covered

security advisory denial of service fedora important infinite loop xrdp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.