-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:51:14 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: armel Version: 0.9.14+dfsg-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: armel Build Daemon (arm-ubc-05) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.14+dfsg-1+deb12u2) bookworm; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: 751820d7d1d44b80a037ec5e396bc1a42530ff90 167684 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_armel.deb 14214135948ebbeb491f661f824aa64242801a8b 175900 libvncclient1_0.9.14+dfsg-1+deb12u2_armel.deb 9faf3f7f47f04fa0c8228ca0e55d039597778997 195388 libvncserver-dev_0.9.14+dfsg-1+deb12u2_armel.deb fc196c60e7d6d687e088dc9286f71a538a75da91 333716 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_armel.deb 77482d68aaeb48eefdde6ccf307efb76558b3ef7 224384 libvncserver1_0.9.14+dfsg-1+deb12u2_armel.deb 1df295a7c9e0799b0249c7142ff78e32cb90f336 8774 libvncserver_0.9.14+dfsg-1+deb12u2_armel-buildd.buildinfo Checksums-Sha256: 17478b22cf3298e773e5d410776824bba20f81ae941c91ac73df93162048c098 167684 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_armel.deb c8209eeb7bf520e14b0345d39f6a06c7ef8324fb74416d68815c64ac6682b418 175900 libvncclient1_0.9.14+dfsg-1+deb12u2_armel.deb c7f5c3d3058f8f420bc98b79a68992c27a547c2afec606f16d928ffe1adbab64 195388 libvncserver-dev_0.9.14+dfsg-1+deb12u2_armel.deb 34ce155e92a40011f4ef94ea42e8ccbc2bea4902731a16d996e2f7a97d43d7ba 333716 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_armel.deb 3a34210d5881a732994983809e92dad20600d153c1b91b080c281ac75bfd576a 224384 libvncserver1_0.9.14+dfsg-1+deb12u2_armel.deb 5b571430fa7efd82abdf1942cb2895726b69bc68347a5ac5fe60e1f0f8fe2bd6 8774 libvncserver_0.9.14+dfsg-1+deb12u2_armel-buildd.buildinfo Files: 9535ec9c6359b743ad1bbda19c4220ab 167684 debug optional libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_armel.deb f35c1337a3676e90e7e5369a619645bf 175900 libs optional libvncclient1_0.9.14+dfsg-1+deb12u2_armel.deb 5942c3c819adb97f26ba673170a5c6d7 195388 libdevel optional libvncserver-dev_0.9.14+dfsg-1+deb12u2_armel.deb cbc269df7876314f0b7e4ae6c9bec6f9 333716 debug optional libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_armel.deb e7bbfa5054a68fdd2c44ecb75d918f5e 224384 libs optional libvncserver1_0.9.14+dfsg-1+deb12u2_armel.deb 796c24bbb42c97129e72361f4586c14e 8774 libs optional libvncserver_0.9.14+dfsg-1+deb12u2_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmpGz7gACgkQnwznazfj XTrbyBAAwQDt3jE/udqUotNVkQDI/ZWzD3B+mdB+CPKwdcqPLvPVIoL0MPrDOoxX nkge+IodoqIKOtvn7uQEG91ejkwiSFGR9qSzZHaYXWayDPMzDawbcPDoexHFhJwd ot/qvogBA7B2W2iJLrN8qWw/dDFt3CgojNJ0nL2YYa4QgjYdG6yQ8fS3jXnNUYkW wvYDjg4aRgnaA87cJELHe4cKFE8e8XDxTKTSlP4JP09eF8Z3GJhNCGNpovJai5gF lV71KfiegkeZ5jvIv0J9Lpmpc5TQ0/gUsOIwdm0gmVOpyF75Zx5hrtJwF4ZKpxV0 GGjLGUyejBZFY+5mijLJ7xgFmep4KvUJapJfsL7x4pBbtzrdJWFVXWIFxk+gzDKs M2EGC148UmQHI0n1IyP8+SNlXkMp6oY0LYP8HqbM9lzl2x5pjQ3C9a0fDQSouH5z lkBi92BhaXWPnUIfE5PcPnR8c668KLu8Bo3scq0+BlVFgwBBnTvAd9ly+KhbNiUn cckbbWoqSaD+HbBFLUK38xCno18p39N2tUtt3SO9DydJ2pD/snuEiQLQN4YXcBij zlq+WLogsdH6Rd+50S6TLmS95Z95Vl5TL4f0l3k9etAFSaBD41rtPVNRJpEQtP6h tPo3oirqXRV3fMwU0dA8V9fYSGi111YXVW7q69056fvxT5MB5AQ= =4CRV -----END PGP SIGNATURE-----