-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:51:14 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: s390x Version: 0.9.14+dfsg-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.14+dfsg-1+deb12u2) bookworm; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: 59f27be6defcf4935ed54bd3c6bf99b8ace4ed7e 171716 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_s390x.deb 88b401c9d4358f91198840a1f7824affb21f0176 180948 libvncclient1_0.9.14+dfsg-1+deb12u2_s390x.deb 075f663e64384070239a266794703cc5faeb01e5 195400 libvncserver-dev_0.9.14+dfsg-1+deb12u2_s390x.deb ddfb239c7508929eeb846559898600d8c0f9782a 334272 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_s390x.deb 22a2eedb24a2d5026ea359e9c3e044143c2bc08b 233976 libvncserver1_0.9.14+dfsg-1+deb12u2_s390x.deb 58be932229b2b9564cbd59a4c6fea491e648d877 8804 libvncserver_0.9.14+dfsg-1+deb12u2_s390x-buildd.buildinfo Checksums-Sha256: 261874c21618e6df49fcfa14716543d47aaf7bb0387ceb2b8920b5100c3d9ae6 171716 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_s390x.deb edba87514cc769ccda89f55a3a1157f26c469e07a6e01c4142ddc6c9c8de32c3 180948 libvncclient1_0.9.14+dfsg-1+deb12u2_s390x.deb 3dcc70c1fa1228ec1c3fb0a12d2a0b9908f8f77c366087ae59263d38e5c76cde 195400 libvncserver-dev_0.9.14+dfsg-1+deb12u2_s390x.deb 6a56ea90f88c51a20ca04e6e4d1696451e1f32ae8f24fd3ebb68cc5c1dcf840b 334272 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_s390x.deb 35fc3735d855aec51c76abacff97e12a463f9c055bb705c30f2f4f0acfcfc65d 233976 libvncserver1_0.9.14+dfsg-1+deb12u2_s390x.deb 312d053742ef048a2088b18d29a7a85e5da53bd47abfe46bfb5bf929c223a475 8804 libvncserver_0.9.14+dfsg-1+deb12u2_s390x-buildd.buildinfo Files: 37a54f1312a771576d90b1d2346a8bb2 171716 debug optional libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_s390x.deb e2fa274600c4b1f59827bf48f28f2ca0 180948 libs optional libvncclient1_0.9.14+dfsg-1+deb12u2_s390x.deb 88be30f3137f3477c6ad54f6747862f1 195400 libdevel optional libvncserver-dev_0.9.14+dfsg-1+deb12u2_s390x.deb a30586efaccea9171d3fcb86dcdecf6b 334272 debug optional libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_s390x.deb ed60dc63a2b54d2ff72fc3a377edbb4c 233976 libs optional libvncserver1_0.9.14+dfsg-1+deb12u2_s390x.deb 272b5d62522cf3b1404377bb74abc6f8 8804 libs optional libvncserver_0.9.14+dfsg-1+deb12u2_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmpGz4EACgkQkaCrxAR3 BY1j/hAAwUGH9dttRBplYVmOQOAb/DJby9Z9KbIwZgBzMG/T2rtWPnzuBOD2mRMc E217NUki47e1pLOXZ7/BlrTCb2VWC5E7MDRW4ViUkLVrUV3LmBk4ag579P0oKs3l J+Gy7wG8WKgu2iE9YIa5Vggsath634Z023Ovm4xDF8BWkWUNOrrgwJzuuxhVsbTP qCslHDcdy7eFyJD5bGDKLVIbEv1hKKSGpsFGKVOYuN49xoI2D7C8lS7O5nUFPkxx n8CVvqG2oPdRoMS1HPL4KS+GGunnor3aZpP0GGUjlUkJFgDPiFg8L5xeGb4Ar6oH vSpDNyspR2pm/KM0aSV/z3xjmHSLgsXzhXPRGs1jmKz3Em4wdfHYWUjhjfF0o4Rp FPgDK2SSOlB/n0kNs63MFf6oTZapfJC/f3I17ub5ii+NxO8o6M9Z7eiv5iacLFoT V3mxDrP6YvSWpPXNIejOYvttBDsFqCsv3YO/5VeWeJdDbUa1DQhsI9bcjSGKCOSZ FEMijQCoyNzpOpIishynDsYD91cv/bSviRytp82qUnv+a+DDERVPRy+4EseIuB0g sx+NeNdxunXgaNsORysFoZIYI0aZVLsNmLBLbpOSrPVWSyRCTWspuB5GSpIrlis0 cIHO+BWSq1MHUfn9izEkAWbDCtYeUnHOfRNJSr8u0tYiSnGQlpg= =gDZZ -----END PGP SIGNATURE-----