-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:21:21 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: armel Version: 0.9.15+dfsg-1+deb13u2 Distribution: trixie Urgency: medium Maintainer: armel Build Daemon (arm-ubc-04) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.15+dfsg-1+deb13u2) trixie; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: 903fe374bf32de28e15545ec9c74b3ad1edfa5be 177008 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_armel.deb e43a4cb9d807cae12594d8eca973dbaf43200061 187432 libvncclient1_0.9.15+dfsg-1+deb13u2_armel.deb 2f026bdd51354428258949f8c1423fa9c982746a 216140 libvncserver-dev_0.9.15+dfsg-1+deb13u2_armel.deb 97d2905a8e92bbe7b9e8a213fb91356ff762d4db 346556 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_armel.deb e239cf14a01984eb4765e2344981fc5be6370271 236816 libvncserver1_0.9.15+dfsg-1+deb13u2_armel.deb 1b5e999bf625e0e1aa20932a43441ba6054eedbf 8696 libvncserver_0.9.15+dfsg-1+deb13u2_armel-buildd.buildinfo Checksums-Sha256: e237e0e078a5ffb239f389f79dbc85e524b40c83772819166119ab98a4b80405 177008 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_armel.deb 4fb2b7a7610a706a33d919f154c561f31424b41229f2eae9cfebc9a25934daea 187432 libvncclient1_0.9.15+dfsg-1+deb13u2_armel.deb 65e0465781d58964ba43d9df71e641dc844f1c442590b6382f9e7cd5010ad0df 216140 libvncserver-dev_0.9.15+dfsg-1+deb13u2_armel.deb 8f0501e47844ca9793d3483697346f938fcccceb3065c96b692b31595947da1c 346556 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_armel.deb a7f561ca7c58263ee5b2e3f32f861b6b0e9fa1e67f3298a269949ef32a7e5e9b 236816 libvncserver1_0.9.15+dfsg-1+deb13u2_armel.deb 493956fa99df3b1ed147799ccb88c79dc8c5c2c8d6626b790590278cf658ef85 8696 libvncserver_0.9.15+dfsg-1+deb13u2_armel-buildd.buildinfo Files: 05a7dba97c7d46e1e02d3353de9e6cbc 177008 debug optional libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_armel.deb 5659175a312f8287d9cb1db3b2d627f7 187432 libs optional libvncclient1_0.9.15+dfsg-1+deb13u2_armel.deb 1c8bf025cfbd2f2a9e5f13333f7867a3 216140 libdevel optional libvncserver-dev_0.9.15+dfsg-1+deb13u2_armel.deb 1040551c04a979de725d74df0c4bef88 346556 debug optional libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_armel.deb 63af3371b3413a71e52c7b2661d1eb6b 236816 libs optional libvncserver1_0.9.15+dfsg-1+deb13u2_armel.deb 598016e02ea4a76fbc2ee841463ad601 8696 libs optional libvncserver_0.9.15+dfsg-1+deb13u2_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmpG0AYACgkQK1PZBedP spoJrQ//Qte2st+I3QIa9NwMGVvx801/uBCOOS4IWBOlbuKskixOpFlZsNb9DdU8 wD6lcf59bMarppkcIcJyd1fYiAwXa0lnqWP4Np/N+B/d5NdgmP03YoYaIeYF1vYO 55UeqjVzu8qSnrNIiwxFkbm2hqgBLBjQqDfHgxkQdUPlf2R6nNVHgYlZLO53+1RG grvN69mapJaUUZ1ABSXyuGtvsYF9fl6Tj6S6EYgVuJkaWlxWjSqNlZhPJmfNzvyQ Oq8k9LBm3IHl9U9+0fLp8IlqzKsxodPPF3CBTs/T/tQnUpzLE6MXdPnvahq9P4Kd RI1hUY5AHCbnQLwiaCW61UdQQouXXDFOyd1kokSI9SVtiGxnR5BNMhEyGMtSJm1I MCQueZ2C3iimz+wjINOz+63t9GJmdMlUzEiYWb3ab6rk17nl3n6TcBM5Yj/NWz7o lY91KSFq5+01yeNp0WUS9gLWr57IEsB6i7ff6OncRmPEmMKILinBtcW6AiFFhk/l +tjjNWjoU5CfCPe+IBBbzh2C+JFhNuG9SJQCPMR0IE3XbcBgkzpz84Ru6sdNkzoc pK14M08IX5MhVh49RE1hVsFH9id02uGrhv5W0z+bpZG21Hk4iTX/GuVr4BUojhkq UIGr+b8Yda0YYzp5GUDegpw0fI3albBRHNqEGECThXUQW7spu/M= =hBqE -----END PGP SIGNATURE-----