Fedora xrdp Security Update Addresses 10 Vulnerabilities

On July 6, 2026, an update for xrdp version 0.10.6.1 was released, fixing 10 vulnerabilities and one regression. The vulnerabilities include CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218, CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626, CVE-2026-55639, and CVE-2026-55645. Affected systems include Fedora 43 and Fedora 44. The update addresses a segmentation fault (SEGV) issue when running over TLS. Users are advised to upgrade using the dnf update program. The vulnerabilities are significant but have been patched, reducing the immediate risk. The updates were announced on July 16, 2026, with a reminder for users to apply the patches promptly.

Key Points: • xrdp version 0.10.6.1 fixes 10 vulnerabilities and one regression. • Affected systems include Fedora 43 and Fedora 44. • Users are urged to apply the update using the dnf update program.