-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:21:21 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: s390x Version: 0.9.15+dfsg-1+deb13u2 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.15+dfsg-1+deb13u2) trixie; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: 6d8b49c185ff180bf525363245610c23a596daf1 187504 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_s390x.deb cdebaf388362317284ca75eb1b1092a2c71a6160 201424 libvncclient1_0.9.15+dfsg-1+deb13u2_s390x.deb 46cea9e7efb9b52827effaa56be4eac4ed42d7b3 216112 libvncserver-dev_0.9.15+dfsg-1+deb13u2_s390x.deb 413404946e6e31b3186c87d7eb82c449f3a737bf 362664 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_s390x.deb 2ee658b17f99b82921ae68244e79e6ba367ad5b8 261036 libvncserver1_0.9.15+dfsg-1+deb13u2_s390x.deb 019df7bff5be094d787d840bcc2047024818b74c 8706 libvncserver_0.9.15+dfsg-1+deb13u2_s390x-buildd.buildinfo Checksums-Sha256: 52fec71bc35171aac59420b339c600e32c9a3e75c13672fef96d08b679082f58 187504 libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_s390x.deb 3e3e0971879dbe86def73b1aafde5868192513ab5da050da9b518e43c28bb03e 201424 libvncclient1_0.9.15+dfsg-1+deb13u2_s390x.deb ef203f36f488c11dcd44c95eb8156feb31eb30776eb924d93b19bf0c24e5da52 216112 libvncserver-dev_0.9.15+dfsg-1+deb13u2_s390x.deb bbd16cb7b05e05af98868f7eb9f4cba9f9b7dd8de874ed3171867a02e43da8b8 362664 libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_s390x.deb afc5db06ef9079ec5de170ea35081852714b4544b00e6d0dc83d7245d7e25af3 261036 libvncserver1_0.9.15+dfsg-1+deb13u2_s390x.deb 9b893bc5b9bb84640037299dbd5f2c300cc2a600a7e0397cfd030c4af901e045 8706 libvncserver_0.9.15+dfsg-1+deb13u2_s390x-buildd.buildinfo Files: 8f184a1cbfa677e92ecab125fc61d9ff 187504 debug optional libvncclient1-dbgsym_0.9.15+dfsg-1+deb13u2_s390x.deb 82289e3769ea036648efd499afc7d268 201424 libs optional libvncclient1_0.9.15+dfsg-1+deb13u2_s390x.deb 7749c7537cc01f0dabd1083af0d0a32d 216112 libdevel optional libvncserver-dev_0.9.15+dfsg-1+deb13u2_s390x.deb a88798db8bba012c2c8b23fc9296be41 362664 debug optional libvncserver1-dbgsym_0.9.15+dfsg-1+deb13u2_s390x.deb 043c4e602f0d4a0434fa89b6d3ed0b12 261036 libs optional libvncserver1_0.9.15+dfsg-1+deb13u2_s390x.deb 4e477236a09b49f8aa54c60634172efd 8706 libs optional libvncserver_0.9.15+dfsg-1+deb13u2_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmpGz60ACgkQvVOPI7pY NpgGtg//Xz6tBROquB9z1MENCTisuP3U687vPgGlO3jmuguzx2PYBMAve3quo5WF DgVEHk5Fmv9JPtpbe4SChjim28xdeJmFYvcw6tqqzlZk2hgVMRF2c9HOtSUdd4Y7 wtgDJo3hrbHSxdAWTZ3nppxY5sa/R4Xn+wIaBIBrbsFlv47C6nrefduMI23ZitcX MiqOjNmmbwz6XPeBZHYEd7cb+4SptD9y/top30wWgo4B2wCy474esHLW19qNONyt akwHrYQMOMGKGSn0PvCJW3wgW5aLqlrFB0/rx1sAFyVszV+sP8yNfNYi6eX9Bkph lvCH8/k5HDn2Gv/KNTmURSuBziGiidBbFKmjECEtwBPzO7oUNFG+v5zlUFRDbJTw duwYOObrMciVN6ZdgK+xRpKwiudvRjo/fmvdJVRWSAd5AeEQflcKLGua0GYlZQc9 74VNQX8MDP41ijiPJqB6hfyhs9odaVLXLuhkBTh5kyI56fa/Hu7Dhf4MTXtrFrY2 FI+gB+NiuHwB6xEyu5eIkt1KN3I1g+eKiv0UEbJ7k2O7JUgfPdKpPit6xRkj2DV2 NF0Mg7PzCAePELpHrpkhtUm61CAXxueEN4INlupYI9vnk6nKtXmdbmqMQ7ottDUj d3s9Jo1y7dIHaOOm2UIihPzy90Dnon1xIzIYWXMAWIPwHvc/8BM= =gdEc -----END PGP SIGNATURE-----