Suse CVE-2026-35512

Upgrade to xrdp version 0.10.6 or later, released by neutrinolabs and available at https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6. This version contains fixes for the EGFX heap overflow vulnerability. If immediate upgrade is not possible, ensure xrdp runs as a non-privileged user (default configuration since version 0.10.2), which limits the impact of successful RCE to the privileges of that user account rather than root. Additional compensating controls: restrict network access to xrdp (default port 3389) to trusted networks only using firewall rules, implement strong authentication mechanisms to reduce credential compromise risk, monitor xrdp logs for unusual EGFX channel activity or crash patterns, and consider disabling EGFX graphics redirection if not required (this reduces functionality but eliminates the attack surface). These controls do not prevent exploitation but reduce likelihood and impact.