<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9">
<package pkgid="b53753a76935ac9a74eb81d3ab8c7d36af07cf5ec016249367b80e79cd062094" name="libpainter0" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="022b72a794f9bee313c09df477e7f6e5e290adeb3a2072bfa034fd171f93c347" name="libpainter0-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="d737e23510f3ad592b3d8b2db118df1da5d8c372c338f72136ce6bf672eb8d20" name="librfxencode0" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="3192dd14f34d25f8d0ddc6346b61e2ae5fc020aadc342465fa5b46059e246ea9" name="librfxencode0-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="a89f88aabdabbabd26ba937f575d5633afdcff369b11e5b3fcc27893d19d1cd0" name="xrdp" arch="src">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="c6ec2d2cb61e68e891de0b5893f084e4fb038808a2cdf4a20dea8ed5aa11dc80" name="xrdp" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="d232aa6711778bab9530ebbda151d104e009573c34448db41ab03df5acb888a7" name="xrdp-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="4ba09462906a604f4832d5fd67f00a12d0b1a62249f4498f7e17c2cad5c3fd3a" name="xrdp-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
<package pkgid="9f1cb6731e3903e21c2dad888b163c7500ec80aebafd8b2d75962d0c66c8d457" name="xrdp-devel" arch="x86_64">
  <version epoch="0" ver="0.9.27" rel="187.1"/>
  <changelog author="yfjiang@suse.com" date="1676289600">- Add xrdp-fix-search-pam-vendor-dir.patch: Search pam
  configuration file in the vendor directory /usr/lib/pam.d/
  (bsc#1208121).</changelog>
  <changelog author="yfjiang@suse.com" date="1678276800">- Add xrdp-make-pamconfdir-configurable.patch: Apply upstream
  implementation and introduce --with-pamconfdir at build time
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).
- Drop xrdp-fix-search-pam-vendor-dir.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1678276801">- Enable --with-pamconfdir=/usr/lib/pam.d on Tumbleweed
  (gh#neutrinolabs/xrdp!2552 bsc#1208121).</changelog>
  <changelog author="dimstar@opensuse.org" date="1686052800">- Do not call %stop_on_removal and %restart_on_update in
  %preun/%postun: those macros would require at least some
  %parameters and actually are the same as the already used
  %%service_del_preun and %service_del_postun.</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1691064000">- Update to version 0.9.22
  + New features
  - Empty passwords are no longer automatically passed through to sesman for authentication
  - Don't try to listen on the scard socket if it isn't there
  - The directory where PAM configuration files are installed can now be set with --with-pamconfdir
  - Sesman can now be configured to ignore alternate shells passed from the client
  - Allow longer UserWindowManager strings
  - openSuSE Tumbleweed move to /usr/lib/pam.d is now supported in the installation scripts
  - VNC backend session now supports extra mouse buttons 6, 7 and 8
  + Bug fixes
  - Minor documentation fixes
  - Memory management fixes to list module
  - Fix some noise when MP3/AAC are in use and some logging improvements
  - Fix potential NULL dereferences in chansrv
  - An erroneous free in the smartcard handling code has been removed
  - Passwords are no longer left on the heap in sesman
  - Set permissions on pcsc socket dir to owner only
  + Security fixes
  - CVE-2022-23468
  - CVE-2022-23477
  - CVE-2022-23478
  - CVE-2022-23479
  - CVE-2022-23480
  - CVE-2022-23481
  - CVE-2022-23482
  - CVE-2022-23483
  - CVE-2022-23484
  - CVE-2022-23493
- Drop upstreamed patches:
    xrdp-CVE-2022-23468.patch
    xrdp-CVE-2022-23477.patch
    xrdp-CVE-2022-23478.patch
    xrdp-CVE-2022-23479.patch
    xrdp-CVE-2022-23480.patch
    xrdp-CVE-2022-23481.patch
    xrdp-CVE-2022-23482.patch
    xrdp-CVE-2022-23483.patch
    xrdp-CVE-2022-23484.patch
    xrdp-CVE-2022-23493.patch
    xrdp-make-pamconfdir-configurable.patch
    xrdp-update-pam.d-path.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="dimstar@opensuse.org" date="1697630400">- Update to version 0.9.23.1:
  + Security fix: Unchecked access to font glyph info
    (CVE-2023-42822).
- Changes from version 0.9.23:
  + General announcement: Running xrdp and xrdp-sesman on separate
    hosts is still supported by this release, but is now
    deprecated. This is not secure. A future v1.0 release will
    replace the TCP socket used between these processes with a Unix
    Domain Socket, and then cross-host running will not be
    possible.
  + Security fix: Improper handling of session establishment errors
    allows bypassing OS-level session restrictions
    (CVE-2023-40184).
  + Bug fixes:
  - Environment variables set by PAM modules are no longer
    restricted to around 250 characters.
  - X11 clipboard clients now no longer hang when requesting a
    clipboard format which isn't available.</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="mike.gabriel@das-netzwerkteam.de" date="1701345600">- Trivial rebase of xrdp-disable-8-bpp-vnc-support.patch.
- Trivial rebase of xrdp-support-KillDisconnected-for-Xvnc.patch.
- Rebase xrdp-avahi.diff.
- Rebase xrdp-bsc965647-allow-admin-choose-desktop.patch. Add MATE Desktop
  support. Launch all desktop session in a dbus-run-session context to
  avoid violent interference with simultaneously running local sessions.
- Trivial rebase of xrdp-filter-tab-from-mstsc-on-focus-change.patch.
- Disable xrdp-fate318398-change-expired-password.patch. It does not apply
  cleanly since xrdp 0.9.18. Reconsider its usage.</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="kukuk@suse.com" date="1716552000">- Drop initscripts-legacy support [jsc#PED264]
- Drop rc&lt;service&gt; symlinks [jsc#PED-264], [jsc#PED-266]</changelog>
  <changelog author="dimstar@opensuse.org" date="1736856000">- Fix escaping of commented out patch: with RPM 4.20, %patch
  becomes a standard, expandable macro, that can span more than one
  line. Commenting out with #%patch can thus lead to invalid
  results.</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1746273600">- update to 0.9.26:
  * Fall back to IPv4 if IPv6 capable but don't have an IPv6
    address set
  * Remove tcutils channel from xrdp.ini
  * Remove duplicate DEBUG output
  * Fix drive redirection regression
  * Fix bug when pasting image to LibreOffice
- includes changes from 0.9.25.1:
  * Fix mouse wheel scrolling in Xvnc session
- includes changes from 0.9.25:
  * touchpad inertial scrolling
  * If the client announces support for the Image RemoteFX codec it
    is logged
- includes changes from 0.9.24:
  * Checking group membership should now work better on systems
    using directory services
  * Pasting more than 32K characters of text to the clipboard now
    succeeds
  * An incompatibility with FreeRDP 2.11.2 in the drive redirector
    has been fixed
- Rebase xrdp-systemd-services.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1770033600">- update to 0.9.27:
  * xrdp.ini manpage updated
  * Unauthenticated RDP security scan finding/partial auth bypass
  * CVE-2025-68670: Improper bounds checking of domain string
    length leads to Stack-based Buffer Overflow (bsc#1257362)
- Drop upstreamed patches:
  * xrdp-memory-allocation-security-fix.patch
  * xrdp-remove-unecessary-gmalloc.patch
  * xrdp-safe-data-chunk-reassembly.patch
  * xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * xrdp-CVE-2022-23468.patch
  * xrdp-CVE-2022-23478.patch
  * xrdp-CVE-2022-23479.patch
  * xrdp-CVE-2022-23480.patch
  * xrdp-CVE-2022-23481.patch
  * xrdp-CVE-2022-23482.patch
  * xrdp-CVE-2022-23483.patch
  * xrdp-CVE-2022-23484.patch
  * xrdp-CVE-2022-23493.patch
  * xrdp-CVE-2022-23477.patch
  * xrdp-CVE-2023-40184.patch
  * xrdp-CVE-2023-42822.patch
  * xrdp-CVE-2024-39917.patch
  * xrdp-CVE-2025-68670.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1778932800">- Add patches for security fixes:
  * xrdp-CVE-2026-32105-1-fips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-2-fips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-3-nonfips-slowpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32105-4-nonfips-fastpath.patch (bsc#1262312,
    CVE-2026-32105)
  * xrdp-CVE-2026-32624.patch (bsc#1262321, CVE-2026-32624)
  * xrdp-CVE-2026-32107.patch (bsc#1262313, CVE-2026-32107)
  * xrdp-CVE-2026-32623.patch (bsc#1262316, CVE-2026-32623)
  * xrdp-CVE-2026-33145.patch (bsc#1262331, CVE-2026-33145)
  * xrdp-CVE-2026-33689.patch (bsc#1262332, CVE-2026-33689)
  * xrdp-CVE-2026-35512.patch (bsc#1262333, CVE-2026-35512)</changelog>
  <changelog author="yfjiang@suse.com" date="1779278400">- Add xrdp-fix-old-gcc-error.patch to adapt the later xrdp
  to be compatible with old gcc (e.g. the gcc in SLE 12).</changelog>
</package>
</otherdata>