Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xrdp for openSUSE:Factory checked in at 2026-06-03 20:23:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xrdp (Old) and /work/SRC/openSUSE:Factory/.xrdp.new.1937 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xrdp" Wed Jun 3 20:23:50 2026 rev:63 rq:1356834 version:0.9.27 Changes: -------- --- /work/SRC/openSUSE:Factory/xrdp/xrdp.changes 2026-05-27 16:17:40.414661655 +0200 +++ /work/SRC/openSUSE:Factory/.xrdp.new.1937/xrdp.changes 2026-06-03 20:27:09.737008256 +0200 @@ -1,0 +2,8 @@ +Wed Jun 3 01:25:23 UTC 2026 - Yifan Jiang <[email protected]> + +- Enforce the security_layer to tls by default in xrdp.ini because + of CVE-2026-32105 (bsc#1262312), see: + + https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-j2jm-c596-c5q3 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xrdp.ini ++++++ --- /var/tmp/diff_new_pack.n96ilR/_old 2026-06-03 20:27:11.257071314 +0200 +++ /var/tmp/diff_new_pack.n96ilR/_new 2026-06-03 20:27:11.265071645 +0200 @@ -40,7 +40,7 @@ ; security layer can be 'tls', 'rdp' or 'negotiate' ; for client compatible layer -security_layer=negotiate +security_layer=tls ; minimum security level allowed for client for classic RDP encryption ; use tls_ciphers to configure TLS encryption
