-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:21:21 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: arm64 Version: 0.9.15+dfsg-1+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-02) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.15+dfsg-1+deb13u2) trixie; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: e6151ba0a07eac1cec96aadf60bebe9167a14d1b 181764 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_arm64.deb 797ade910e140431eea37e0930b6f62efecba44b 191840 libvncclient1_0.9.15+dfsg-1+deb13u2_arm64.deb 5b01a1a810a58a5b37d4114e71b9cffe66389d73 216128 libvncserver-dev_0.9.15+dfsg-1+deb13u2_arm64.deb 9cf5ed87eada4763b05a584b693b269137acc6cc 344056 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_arm64.deb 8996443e7aae43404e38311a3c8e6c805a3fcc16 240536 libvncserver1_0.9.15+dfsg-1+deb13u2_arm64.deb 074296df0428f9ce634ca6f1e215ff529c708c74 8828 libvncserver_0.9.15+dfsg-1+deb13u2_arm64-buildd.buildinfo Checksums-Sha256: 7de04fc2b1f76630d7b752e2eacc27a2f80d719bfe57bcf0513b3e94c4404d14 181764 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_arm64.deb 492864056711a49fa1b9bc5c5f8f15ab6269420dd9a15791f3908f8f6fd2d1f1 191840 libvncclient1_0.9.15+dfsg-1+deb13u2_arm64.deb 42df4c79c7145b25e4aea4b3604b3ce150709f312ff5181772df1473a5de61a4 216128 libvncserver-dev_0.9.15+dfsg-1+deb13u2_arm64.deb 27a54bf57b9c264b733aac6153e7da1e021093c77295e62b15ea48a3b3a0ac43 344056 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_arm64.deb d87d2119e59782e704188cd7c8a3fea31a679d9bb9bda0ab67ad028ddccb05fa 240536 libvncserver1_0.9.15+dfsg-1+deb13u2_arm64.deb 83ec4a9d82d2bce02012a00b941d3e7302af905b904227e6552423ef21584136 8828 libvncserver_0.9.15+dfsg-1+deb13u2_arm64-buildd.buildinfo Files: 5003af5a78683e22326ad63144418a19 181764 debug optional libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_arm64.deb 72e89658d62029bc81594756ac72b80d 191840 libs optional libvncclient1_0.9.15+dfsg-1+deb13u2_arm64.deb 4b8b9809806a71c8b0f3a0bdb8839fd2 216128 libdevel optional libvncserver-dev_0.9.15+dfsg-1+deb13u2_arm64.deb 8dda824788bb80a07f9820e3ab900601 344056 debug optional libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_arm64.deb 52f0ef19ecd119aa2ba7bd84918d77f6 240536 libs optional libvncserver1_0.9.15+dfsg-1+deb13u2_arm64.deb 711baf381c99b9b5b6feae7439cdbbce 8828 libs optional libvncserver_0.9.15+dfsg-1+deb13u2_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmpGz+YACgkQG5VHrWJm wgcfihAAu0hIqvoc3c7RL/25S7dj/xe7a6GrwFFLnd39B5ABBNXxv4Zi4GdVu2dw 3D10fFcf2zjwfCSr8c4Q0RwpBFJVoDZTX4EclN8KPwF78w0ZR5msn5klaNzC/b1N wEZPzbeFx2DshELf1FZ7ffw2CcPIF1ZvlHIXoTnKHdn+PVheV1nsl6/pcnUuHHp7 FuXznyt//6Ce5VuBsTykp961nDSzekUCpCQ5Lxn8UxNTdKN8FspY1f/yZd6eS8DR mQQlEhQRdBrMCoC0bfX463Fr+mKyL56WgqsnI2Sqi28KBpcaNBkBfFVytCREkN6k XMSWy0fD3OqL+ahbocQoZ9rPaINbkEWO0UE77Q8jLAfZAXWzktdFFNkWGYAswX9B wC8zNOjEHwjEiEs+C3g9gwpVvc1w8rEqaDy5wxuegMrb1rOEubbpvXmABlOHwZ6F tHoB8y6dXH3cA67jhpGgfSMXDC0v0nqT6mjA3BzEBPBIFVfPcJLQlYdM8Yh/+vJF pK6XCb+VH9o5CyW+fl5YjL7dIZe9JQDCKTYCX9FfgH2+7Av+yZArHXGJ4mcL2a4t tUWu7BOl+Wl315BOBRUWctS3Wr9R6/S047rOsq/9kzS3MAueaMfFbUXrspg+WRfr F6J3L9ebbL7SFsJPAfuhMN0I5HFdk8Kjl2whZ7KvEepK5+TdHpU= =A3Te -----END PGP SIGNATURE-----