-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:21:21 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: riscv64 Version: 0.9.15+dfsg-1+deb13u2 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-03) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.15+dfsg-1+deb13u2) trixie; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: e97cf98313ff8b1fd98b1736957427a4c613248c 178440 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_riscv64.deb 6d0e82d6c4f6be3e320cabcbe5d46e0b7cdb2bba 201724 libvncclient1_0.9.15+dfsg-1+deb13u2_riscv64.deb 6f3555d8f1f031e108a97bbf554861c99786763b 216152 libvncserver-dev_0.9.15+dfsg-1+deb13u2_riscv64.deb 6d95dccd2d6115063303842fa68b5ecdbc8eaab5 331992 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_riscv64.deb 9468ccabd57a031a0e33fcce849dec65c666a9a9 256356 libvncserver1_0.9.15+dfsg-1+deb13u2_riscv64.deb 69794087f889995d2cb51633d9b15508b5fcc1c3 8806 libvncserver_0.9.15+dfsg-1+deb13u2_riscv64-buildd.buildinfo Checksums-Sha256: 5ed984118fa6eaaa9566b6b30f781dcd2842c4579e72370e180e565644c6891a 178440 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_riscv64.deb 33d1622304e25ba3db08ae6ac9c1016ad047a24c5afa5625e145a347b49eb416 201724 libvncclient1_0.9.15+dfsg-1+deb13u2_riscv64.deb 429c9130f5075a8aa3c3360c1b6f7570a54720e90eb6cdf31851009893488fa3 216152 libvncserver-dev_0.9.15+dfsg-1+deb13u2_riscv64.deb 29a6f763284228133e8b16e5ba0a29144b9dc55c1b40af979560307f7b4c3c74 331992 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_riscv64.deb e468ba31f9e38f4adf5eefec83d2c22b5a45889d850f1f8d747d6f824ad4ec70 256356 libvncserver1_0.9.15+dfsg-1+deb13u2_riscv64.deb 3504bc2e13a24c7c41c85583acda61dfaf94d787415c6cbfdf485508713caae2 8806 libvncserver_0.9.15+dfsg-1+deb13u2_riscv64-buildd.buildinfo Files: 8257833e6801ff7d68c6dea8cd6220fc 178440 debug optional libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_riscv64.deb bcc876981218b7a1044d84b0b3bb9e82 201724 libs optional libvncclient1_0.9.15+dfsg-1+deb13u2_riscv64.deb 8bdb7530592a0c167bdefb2ee2c595ca 216152 libdevel optional libvncserver-dev_0.9.15+dfsg-1+deb13u2_riscv64.deb 94dc0d664e2a4b2052705a78bd04b095 331992 debug optional libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_riscv64.deb a5c3ea12fc83755fbaf38ee7937f5978 256356 libs optional libvncserver1_0.9.15+dfsg-1+deb13u2_riscv64.deb 87834c4abea485cab43989e323677da4 8806 libs optional libvncserver_0.9.15+dfsg-1+deb13u2_riscv64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExv8RwtKAmv8J56r/6ETk30hvxtkFAmpG0oEACgkQ6ETk30hv xtmCLQ/9G1Tu1hW0GkZ17hxVox65MzTKWo/bpnKzmdLLq97b3Hl8WKjdqIRR0/n5 UPy0Ziuuls/RJ81P67KNy/Mbhb79/nvPR7ym1kLNuPtbeEyPeKdK+ZAgl/PuU3pu 8/Q5ZxbJvzmNwEz4ca5Mf/qC8U+frkuQfCl/xeib8FYuRL8OF4/vuTEPAJtefa/2 AuqIxASINhHm0xrtaHmo3GkHUanXwnPbL0bM4rW6CDLaR6gCQDf/pEQrjv2S/XyU R6NbFm794URP7boPUpsc8BDeFX1ixvEBvgXDY9uXznNS3vvCFWaTosGojetuddV8 OLOkq8h9LLZDLiCDi+2xa3kxVwMvRXRORooj7gb6dT1K+uz5k0ewYcGlKD3PYBoC TfIUyo5qYwwpsLSRtsgC75gS2tgVcZ1IB+/oKOY/WN9AYzV++AWRmqzXEl1zu3yB BwtPaHdQpYFKSNjtgwuJBx+08ZkkxE8Nz6at59vNqBK8Vm53bJ5M1fFukLmiHh95 4BHdZUbWjfIpYUSbCiBKjJRFnSfCndIvF2qr1+Txmw1O4Voyej/EAXlfV8uPAgkD i7rpdRFcEGpIukHV/+htwiouN6hywtVWhvVF3vJq5imhzWBS/vlr+YTizgWHsJcU W43j2NDjvvqgLiErFdd6wPXK2mZnHOSsRqLzd6+3bMyb5DHiXK4= =O7sY -----END PGP SIGNATURE-----