-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:51:14 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: arm64 Version: 0.9.14+dfsg-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-01) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.14+dfsg-1+deb12u2) bookworm; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: 2812f74ac463b427b526e455381d934fb428a22a 175508 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_arm64.deb 4d051d1ad19b4f2a3c82a1a6cf96aa6cd62b2901 180700 libvncclient1_0.9.14+dfsg-1+deb12u2_arm64.deb 500a83331a2e847ff4dc2965a0cc4ec7eae441f1 195444 libvncserver-dev_0.9.14+dfsg-1+deb12u2_arm64.deb 8a6a8c2fc4ee7190da4006e446a91f0766ddd98a 336008 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_arm64.deb 2e351eed8d3df792ca0f23b38d7308cbaa30c44b 231316 libvncserver1_0.9.14+dfsg-1+deb12u2_arm64.deb 010a5cb6ec03b8938bdb5886a6136a3f4a0894a4 8932 libvncserver_0.9.14+dfsg-1+deb12u2_arm64-buildd.buildinfo Checksums-Sha256: 3eb80cfac9455c8034d87e5e4aefde2485285677c4457ab9827af4d33020155c 175508 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_arm64.deb c2b0301481712e72275f4f0ce0f0101b50481604337751cd678a486d2577c64b 180700 libvncclient1_0.9.14+dfsg-1+deb12u2_arm64.deb dfbf480b4c1667c56d3fa5742d8cf09cd07811ea00a3664bcf7cbab5f0257efe 195444 libvncserver-dev_0.9.14+dfsg-1+deb12u2_arm64.deb 277cccc223de620ea39af208743460359487744953740b2e64765c2178fac61a 336008 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_arm64.deb 109164c1148a07e1d438ff3cfac7ddca7b58442b07efb53a3caa5fdb448b6ae0 231316 libvncserver1_0.9.14+dfsg-1+deb12u2_arm64.deb d5751be4551a87fa043c5a4788053db051ce932e44ee1211cec9f761ec27814c 8932 libvncserver_0.9.14+dfsg-1+deb12u2_arm64-buildd.buildinfo Files: e266b65533bfcab88fb3d0555365374b 175508 debug optional libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_arm64.deb baa3405f99128b1a5739d1bc2049c0e5 180700 libs optional libvncclient1_0.9.14+dfsg-1+deb12u2_arm64.deb 6139687ffc4798b860acc555448da98b 195444 libdevel optional libvncserver-dev_0.9.14+dfsg-1+deb12u2_arm64.deb a2dc0f12c1bea2422741354bc4661372 336008 debug optional libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_arm64.deb af890b7aeba22b13dfc1cf152e03d35b 231316 libs optional libvncserver1_0.9.14+dfsg-1+deb12u2_arm64.deb 9ec23f7877f257bc325f7826a46d4c7d 8932 libs optional libvncserver_0.9.14+dfsg-1+deb12u2_arm64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmpGz50ACgkQxqCFmsOW gobclw//Q/Kt7rtVkFXKfJ7m0Yphm/Oc8/FaHzY3nAm9TgC4mR2Cng3uw/cMkX3l aHqt1ar0N7dbYZn7TeA4RYq/NOSl0z6N2DOcnAGj/4KTmkIiqnGgl7ycS92rL9bg hAxYX54lryWOBkJlv5+AjYsIVURDmQ8zMkm4WJUN4Tu/AEpGhgUH1hpmNdolCRdF X4Rj2W+K7yYwN3X/n0jMdDbMP1D2q5f5x28H9wm03eQr0jLuFfNSAeBIr5Hzv1mh j0oaIgnAgHrFTOu1xkzLMQR4j8bUL2i+y4hhrPUvRrFiDT6nSot4qpCugMSu3JqU 2LBQRqp18KeHx6ixuqo6bjIfBQF9Zm7zsBdO9MrncUtjDKs0EdZTCGBLxUrVb0MM 5DpA1m33lnAQenx+CCCAu86Ws7oWkI8/vi10vi9TPpkR+M2tptujOabf6+YpozCQ eC+RFduEt0KbUt/4ClnKZwIqDZKLw/axTa1vDLA0FLibKor9zMy5dLVulbJM/cUg aU9tFpHmJYECOFdJKOkLAvcSoxaAZXvhK+YRze24EizHKOWaf25qG+ycA/M8YsoH jnZplV0tb4sHfMjF08lz/qL5L2PrI8vyj9tzlhoFzLFJSZtU5nzN2RKytvKJhEWK 8gYSfWzejItSrJb0v+LOZHypycmgKzvdHRN9bRqf1x559fF8BDc= =tRSe -----END PGP SIGNATURE-----