From ece555fba955acd3b4971a359f1c446036a474bc Mon Sep 17 00:00:00 2001 From: Gwyn Ciesla Date: Fri, 9 Aug 2019 07:46:25 -0500 Subject: [PATCH 1/7] "Adding package.cfg file" --- package.cfg | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 package.cfg diff --git a/package.cfg b/package.cfg new file mode 100644 index 0000000..66ea79d --- /dev/null +++ b/package.cfg @@ -0,0 +1,2 @@ +[koji] +targets = epel8 epel8-playground \ No newline at end of file From f95d77a6302a0559a98aad0219a5c4de0ba1cf83 Mon Sep 17 00:00:00 2001 From: Troy Dawson Date: Thu, 24 Sep 2020 16:08:38 +0000 Subject: [PATCH 2/7] remove package.cfg per new epel-playground policy --- package.cfg | 2 -- 1 file changed, 2 deletions(-) delete mode 100644 package.cfg diff --git a/package.cfg b/package.cfg deleted file mode 100644 index 66ea79d..0000000 --- a/package.cfg +++ /dev/null @@ -1,2 +0,0 @@ -[koji] -targets = epel8 epel8-playground \ No newline at end of file From f0f5a7dfd81ae29ac4ed6dc9527d286a5fb3e245 Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Mon, 8 May 2023 09:52:45 +1000 Subject: [PATCH 3/7] Exclude rfxcodec.pc - shared library no longer created. --- xrdp.spec | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/xrdp.spec b/xrdp.spec index 5049125..14c7e70 100644 --- a/xrdp.spec +++ b/xrdp.spec @@ -17,7 +17,7 @@ Summary: Open source remote desktop protocol (RDP) server Name: xrdp Epoch: 1 Version: 0.9.22 -Release: 2%{?dist} +Release: 3%{?dist} License: ASL 2.0 and GPLv2+ and MIT URL: http://www.xrdp.org/ Source0: https://github.com/neutrinolabs/xrdp/releases/download/v%{version}/xrdp-%{version}.tar.gz @@ -269,20 +269,25 @@ fi %endif %ghost %{_localstatedir}/log/xrdp.log %ghost %{_localstatedir}/log/xrdp-sesman.log +%exclude %{_libdir}/pkgconfig/rfxcodec.pc %files devel %{_includedir}/ms-* %{_includedir}/xrdp* %{_includedir}/rfxcodec_*.h -%{_libdir}/xrdp/lib*.so %{_libdir}/pkgconfig/xrdp.pc -%{_libdir}/pkgconfig/rfxcodec.pc %files selinux %doc SELinux/%{name}.te %{_datadir}/selinux/*/%{name}.pp %changelog +* Mon May 8 2023 Bojan Smojver - 1:0.9.22-3 +- Exclude rfxcodec.pc - shared library no longer created + +* Sun May 7 2023 Bojan Smojver - 1:0.9.22-2 +- Explicitly exclude .la files on RHEL + * Sun May 7 2023 Bojan Smojver - 1:0.9.22-1 - Bump up to 0.9.22 From 6b6996f71eace1726d1812c8440af1662953ba2d Mon Sep 17 00:00:00 2001 From: Yaakov Selkowitz Date: Fri, 12 Jun 2026 20:08:57 -0400 Subject: [PATCH 4/7] Rebuilt for openssl 4.0 --- xrdp.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/xrdp.spec b/xrdp.spec index c4c1b1b..4d7acd6 100644 --- a/xrdp.spec +++ b/xrdp.spec @@ -23,7 +23,7 @@ Summary: Open source remote desktop protocol (RDP) server Name: xrdp Epoch: 1 Version: 0.10.6 -Release: 2%{?dist} +Release: 3%{?dist} # Automatically converted from old format: ASL 2.0 and GPLv2+ and MIT - review is highly recommended. License: Apache-2.0 AND GPL-2.0-or-later AND LicenseRef-Callaway-MIT URL: http://www.xrdp.org/ @@ -351,6 +351,9 @@ fi %{_datadir}/selinux/*/%{name}.pp %changelog +* Sat Jun 13 2026 Yaakov Selkowitz - 1:0.10.6-3 +- Rebuilt for openssl 4.0 + * Fri May 22 2026 Bojan Smojver - 1:0.10.6-2 - close TCP port in default Xvnc config, Unix domain socket only From 766e5394816fa4183740fe8f73f2ae819bf030a3 Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Tue, 7 Jul 2026 19:02:39 +1000 Subject: [PATCH 5/7] Revert "close TCP port in default Xvnc config, Unix domain socket only" This reverts commit 9da935c0871ca07c98ee2e9355d520fd338bbc83. --- xrdp.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xrdp.spec b/xrdp.spec index 4d7acd6..34d455e 100644 --- a/xrdp.spec +++ b/xrdp.spec @@ -45,7 +45,7 @@ Patch4: xrdp-0.9.6-script-interpreter.patch Patch5: xrdp-0.9.16-arch.patch Patch6: xrdp-0.9.18-vnc-uninit.patch %if 0%{?fedora} >= 32 || 0%{?rhel} >= 8 -Patch8: xrdp-0.10.6-sesman-ini.patch +Patch8: xrdp-0.10.5-sesman-ini.patch %endif BuildRequires: make From b874f218123148f8bb6c87209e8f57b6fb6097e3 Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Tue, 7 Jul 2026 19:18:11 +1000 Subject: [PATCH 6/7] Revert "Close TCP port in default Xvnc config, Unix domain socket only" This reverts commit abcf261e6c9053f70b2aee0978ada17f3347cf05. --- ...sman-ini.patch => xrdp-0.10.5-sesman-ini.patch | 15 --------------- 1 file changed, 15 deletions(-) rename xrdp-0.10.6-sesman-ini.patch => xrdp-0.10.5-sesman-ini.patch (63%) diff --git a/xrdp-0.10.6-sesman-ini.patch b/xrdp-0.10.5-sesman-ini.patch similarity index 63% rename from xrdp-0.10.6-sesman-ini.patch rename to xrdp-0.10.5-sesman-ini.patch index 0b71f1d..493e758 100644 --- a/xrdp-0.10.6-sesman-ini.patch +++ b/xrdp-0.10.5-sesman-ini.patch @@ -18,18 +18,3 @@ ; Leave the rest parameters as-is unless you understand what will happen. param=-config param=xrdp/xorg.conf -diff -rupN xrdp-0.10.6-v/sesman/sesman.ini.in xrdp-0.10.6/sesman/sesman.ini.in ---- xrdp-0.10.6-v/sesman/sesman.ini.in 2026-05-22 04:53:40.290862163 +1000 -+++ xrdp-0.10.6/sesman/sesman.ini.in 2026-05-22 04:58:24.490852336 +1000 -@@ -170,7 +170,10 @@ param=Xvnc - param=-bs - param=-nolisten - param=tcp --param=-localhost -+# Unix domain socket is default, close TCP -+#param=-localhost -+param=-rfbport -+param=-1 - param=-dpi - param=96 - From 47aee857fa96aaf655796d997ac6d4bba1db3989 Mon Sep 17 00:00:00 2001 From: Bojan Smojver Date: Tue, 7 Jul 2026 19:33:24 +1000 Subject: [PATCH 7/7] Update to 0.10.6.1 CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218 CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626 CVE-2026-55639, CVE-2026-55645 --- sources | 2 +- xrdp.spec | 11 ++++++++--- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/sources b/sources index bdcd314..b24fbd2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (xrdp-0.10.6.tar.gz) = 4631162f8a35ee358238e52882964819c39067b2337f2affecae28ca53008e4dae455e0b59932724c222af8016c5b8a638bb455d31dfdf0774f6558e79876781 +SHA512 (xrdp-0.10.6.1.tar.gz) = 14fc2bdc7d450b0194d48244450fee2dc40d248bf0d7d64538959827919d517bda90cda5985014e6b5adf101cbb584e83cf72e5181adcff78b3131653937e108 diff --git a/xrdp.spec b/xrdp.spec index 34d455e..604f975 100644 --- a/xrdp.spec +++ b/xrdp.spec @@ -22,8 +22,8 @@ Summary: Open source remote desktop protocol (RDP) server Name: xrdp Epoch: 1 -Version: 0.10.6 -Release: 3%{?dist} +Version: 0.10.6.1 +Release: 1%{?dist} # Automatically converted from old format: ASL 2.0 and GPLv2+ and MIT - review is highly recommended. License: Apache-2.0 AND GPL-2.0-or-later AND LicenseRef-Callaway-MIT URL: http://www.xrdp.org/ @@ -38,7 +38,6 @@ Source7: xrdp-polkit-1.rules Source8: %{name}-tmpfiles.conf Source9: %{name}.sysusers Patch0: xrdp-0.10.2-sesman.patch -Patch1: xrdp-0.10.3-xrdp-ini.patch Patch2: xrdp-0.10.1-service.patch Patch3: xrdp-0.10.0-scripts-libexec.patch Patch4: xrdp-0.9.6-script-interpreter.patch @@ -351,6 +350,12 @@ fi %{_datadir}/selinux/*/%{name}.pp %changelog +* Tue Jul 07 2026 Bojan Smojver - 1:0.10.6.1-1 +- Update to 0.10.6.1 +- CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218 +- CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626 +- CVE-2026-55639, CVE-2026-55645 + * Sat Jun 13 2026 Yaakov Selkowitz - 1:0.10.6-3 - Rebuilt for openssl 4.0