-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:21:21 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: armhf Version: 0.9.15+dfsg-1+deb13u2 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.15+dfsg-1+deb13u2) trixie; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: c3047c7d87e11cfe8ba7fe4ee443b782795e8776 179560 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_armhf.deb 6fc0bddd2d230ad770b1a728dc8d4405fd853ef9 187668 libvncclient1_0.9.15+dfsg-1+deb13u2_armhf.deb 01c7c9c96a6bd3af0db8a419c7caacb205e6b6e7 216140 libvncserver-dev_0.9.15+dfsg-1+deb13u2_armhf.deb ef36628cccd3e0203c27256f75e6ed71cad82517 350888 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_armhf.deb 1a70380b623992aac57c721a2204ec6970143cbf 236492 libvncserver1_0.9.15+dfsg-1+deb13u2_armhf.deb 27ffadc3e9f649d2c65976f17e96bef29f5bc2e4 8710 libvncserver_0.9.15+dfsg-1+deb13u2_armhf-buildd.buildinfo Checksums-Sha256: 46abfcdec52ccca822711ab35f69a7954ab1d777b0cb8e8cc208aa7c3fcc0f3e 179560 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_armhf.deb bfba8cd9c79544471ec005f277c44202fd808a1d853afc49ec61ac28e4d52c28 187668 libvncclient1_0.9.15+dfsg-1+deb13u2_armhf.deb bcf0f713eb38ac75d41e3c8cc3911f2691dcaafd764ac2a5483022f63785c2fa 216140 libvncserver-dev_0.9.15+dfsg-1+deb13u2_armhf.deb 7df1128aaf8febea200f834d209c5e81dce85b3d4715b850547a9ddd5fa2f5fd 350888 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_armhf.deb f614e9cafc178ffebaf7ac95b8c1c7c511f6b4d5e8317b7a9a050a2a215ede00 236492 libvncserver1_0.9.15+dfsg-1+deb13u2_armhf.deb ce213999a03996d5357b67895901e5df6f046c316a7b00adca89541ff6df103a 8710 libvncserver_0.9.15+dfsg-1+deb13u2_armhf-buildd.buildinfo Files: 8b6378c84b16e59a7f1734d84045dc89 179560 debug optional libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_armhf.deb 69aab0555f255f97f9dbfe094aad102c 187668 libs optional libvncclient1_0.9.15+dfsg-1+deb13u2_armhf.deb 4edef18537f896de2488c815d4a5b5dd 216140 libdevel optional libvncserver-dev_0.9.15+dfsg-1+deb13u2_armhf.deb 9f4a1bfdaeebaf2b9c6e662df7ea76d8 350888 debug optional libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_armhf.deb 1b7ab489a7bc16b682a7171617290c32 236492 libs optional libvncserver1_0.9.15+dfsg-1+deb13u2_armhf.deb 447ad808ebfd0976b7f5841f175c745f 8710 libs optional libvncserver_0.9.15+dfsg-1+deb13u2_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmpGz/IACgkQ8U6eOZMp j69YVRAAsfShO0TZzFqHS2giTjNhVWGi0LThgFnS1CFSfP7pyzCiYf4QYZDf72Zv gtOH2d7Hw+Ziv5k2ETj97HUlJWYuz15g608J3rNLB8afVR89B3j+VFk/jhUQKXLz UhuBOWyxYQnAVJWtpTV8bfgdF439ftTBuI5/+PevKgE86LCFfl7pMD2e6N+1wdnV VN6EgSeXrvC+NmYRZF3pua8Wh8+qxbCfxye9etYTXQNKC2f375RWD+7RiuSkpElM Mg/vVjFeZIAfeo2nX34cc0VAZNJIz0jP6QVeeIddiMpS3L6VIW+vNc3PlyTOxLJE Aw5enM1VsIB9AzNpYtsc5MfcrC1QqF9kk4zV6dw4yXAGyCwJ/YFMJxnY0ypMV03i dSJyLYI0Csl9lXI4kbbXmvbTV4Op5jZjSw5uhybYgvg9yvC3pisAx5UdeOoQNmSq lLQRCllraFX4SL711XuOe65llr0OD1bgNNIx+ZSl2A1cRHFRv8IB6dUDIx+LuFXZ hm+PcPf5R9S9zfuOWU5OwrwdqT4lHFCZH4k3ZDHTkbrU51brfqIiKY7tGabVsuLA x1FOdZHb+NsAOiEqqV9y+oLxbfPlm0Jw+izjC2tqqXp35AxtrVQ0hqV31ySQ75Qa 8g9VTsMCBqTccHezTr/VBDuvg3GnaGcO41r4xKm6q7dwMKBiBhQ= =ksJg -----END PGP SIGNATURE-----