UbuntuUpdates.org

Package "xrdp"

Name: xrdp

Description:

Remote Desktop Protocol (RDP) server
Latest version: 0.6.1-2ubuntu0.3
Release: xenial (16.04)
Level: updates
Repository: universe
Homepage: http://xrdp.sourceforge.net

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "xrdp"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "xrdp" in Xenial

Repository Area Version
base universe 0.6.1-2
security universe 0.6.1-2ubuntu0.3

Changelog

Version: 0.6.1-2ubuntu0.3 2019-01-22 16:07:06 UTC

  xrdp (0.6.1-2ubuntu0.3) xenial-security; urgency=medium

  * SECURITY REGRESSION: Fix conection problem (LP: #1811122).

 -- Paulo Flabiano Smorigo <email address hidden> Wed, 16 Jan 2019 22:26:35 -0200
Source diff to previous version
1811122 Cannot use xrdp to login to sesman-Xvnc after 0.6.1-2ubuntu0.1

Version: 0.6.1-2ubuntu0.1 2019-01-09 15:07:00 UTC

  xrdp (0.6.1-2ubuntu0.1) xenial-security; urgency=medium

  * SECURITY UPDATE: Fixes a VNC security issue where the VNC password file is
    based on the user password.
    - debian/patches/CVE-2013-1430-1.patch: sesman: change vnc password file
      to guid
    - debian/patches/CVE-2013-1430-2.patch: sesman: work on guid / vnc
      password file
    - debian/patches/CVE-2013-1430-3.patch: xrdp,vnc: work on guid / vnc
      password file
    - debian/patches/CVE-2013-1430-4.patch: xrdp,vnc: password fixes
    - debian/patches/CVE-2013-1430-5.patch: vnc: add const and comments to
      rfbEncryptBytes
    - debian/patches/CVE-2013-1430-6.patch: sesman, xrdp: const, spacing
      changes
    - CVE-2013-1430

 -- Paulo Flabiano Smorigo <email address hidden> Tue, 08 Jan 2019 10:11:52 -0200
CVE-2013-1430 An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd


About   -   Send Feedback to @ubuntu_updates