-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 03 Feb 2026 13:27:53 +0100
Source: xrdp
Architecture: source
Version: 0.9.21.1-1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Remote Maintainers <debian-remote@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1126537
Changes:
 xrdp (0.9.21.1-1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * CVE-2025-68670: Buffer overflow parsing domain (Closes: #1126537)
Checksums-Sha1:
 b31c826c667d097208fb3a7c695ed64175409eca 2422 xrdp_0.9.21.1-1+deb12u2.dsc
 722bc19b691fff23e0f24548dce80df99ba5628c 2053402 xrdp_0.9.21.1.orig.tar.gz
 c712501ab6e777130b67d9e3c04ee86ad6800cc4 28108 xrdp_0.9.21.1-1+deb12u2.debian.tar.xz
 cf4ab72747695501849a4e869db93f6d7ce44515 6405 xrdp_0.9.21.1-1+deb12u2_source.buildinfo
Checksums-Sha256:
 2cb98b720979aab3bf0562650740c74866afc0bbddf4c26b9da93634a4971bdf 2422 xrdp_0.9.21.1-1+deb12u2.dsc
 7c6c42dce7d3201efe4481e0d388e00094bf8f15224ddad9e47b402a672e08e3 2053402 xrdp_0.9.21.1.orig.tar.gz
 782fa7da0411e6a6140c26cfb32411f26f737429fc31f45d4b90492df6662fd8 28108 xrdp_0.9.21.1-1+deb12u2.debian.tar.xz
 dbc019f713f1efcf01f95def81c6e6e96f5384ee638c5da639a1e84f25b5b4c8 6405 xrdp_0.9.21.1-1+deb12u2_source.buildinfo
Files:
 15bd6e5e6e5641a93337e97300047171 2422 net optional xrdp_0.9.21.1-1+deb12u2.dsc
 32a4b1589f051fc69cde698f7225e095 2053402 net optional xrdp_0.9.21.1.orig.tar.gz
 4e01a4ab846b7968aff3fd85e04a4442 28108 net optional xrdp_0.9.21.1-1+deb12u2.debian.tar.xz
 53948c99f338a3ab1683a71ed5777363 6405 net optional xrdp_0.9.21.1-1+deb12u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmmCFLBfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EV1kP/iHSk1erAIHJbwXKcTblzBLC9b+Ucwiw
bqoRDGL3j/uzmjfobbf+IhAzDTwdV2Z58wCf640D8uuoa2a5P47vZ3MOgdOewI2j
QIX5bX8GRTfMYyX4kkJ9nMVYrah4ad0yblS1fNIqIJ1ZRUDIm195gjv4x/6xerqT
I8kK1DFZWQEnEPtOLYrSqcIsNp6eylbOrs023guokd3bUnZoW9CB7RiIYTBnq6hr
XGnHiI8UPIcFHIAbuj34Y51o8CO5Bj+sUwsGOzRZHGcA8WdKiQALNiAIzJO1nZ04
iW438ISYfPOxkJGuORG5dbK7qGfPU7nxViI8DnvCCVhcuEdqwcXLXLX+VIUiAl2I
iHqQIwQtFjcC35Gm7Skq2tFB7cOyHBZSfjt/fmWQ/elf6moLwhfjctNbyXBZM1ls
lA6j65iLiK0jeOvOi5uSyDlzUzxz3y74Ljas7Fr8lsQmT4oyeU+mEtX81UY3iDQa
Xn3jqsGTqdclseUUoZWl0/Z2BikAsyLRWN2lrD68+fmNDFSa8/0o0CaylVBhxz8V
HaB7zwkIg+ORC8UVtajoccYoYwyDTurEy9Qoc2onZZuaUfW0RI/dmRyn6giTOVgD
NmEEiydeAQnIQf7josUWKVq77dAat6USzroPvGQufBfKaLEtqKpmPR9gg6CcOcl8
LY3c3LocgUMf
=9Bya
-----END PGP SIGNATURE-----