-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 17 Jun 2026 12:51:14 +0200 Source: libvncserver Binary: libvncclient1 libvncclient1-dbgsym libvncserver-dev libvncserver1 libvncserver1-dbgsym Architecture: i386 Version: 0.9.14+dfsg-1+deb12u2 Distribution: bookworm Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Sven Geuer Description: libvncclient1 - API to write one's own VNC server - client library libvncserver-dev - API to write one's own VNC server - development files libvncserver1 - API to write one's own VNC server Closes: 1138174 1138253 Changes: libvncserver (0.9.14+dfsg-1+deb12u2) bookworm; urgency=medium . * Team upload. * debian/patches: + CVE-2026-44988: Add 0003_CVE-2026-44988.patch fixing Tight gradient decoding overflow (Closes: #1138174). + CVE-2026-50538: Add 0004_CVE-2026-50538.patch fixing attacker-controlled heap out-of-bounds write (Closes: #1138253). Checksums-Sha1: d2700d1e9e6034564f6341e7037b63f1eb432681 156960 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_i386.deb 6ade0427927ae7c1e585e78ef7700ca8ef072795 189660 libvncclient1_0.9.14+dfsg-1+deb12u2_i386.deb 694d5c2fcc45a8b3a043c4db662b294ed1691529 195404 libvncserver-dev_0.9.14+dfsg-1+deb12u2_i386.deb b0d8e3b92a3217eb484d724d6973d2ba3df9a7db 305148 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_i386.deb d4acfc61743801ab07da68bb4b3f85fbd1cf11b0 248412 libvncserver1_0.9.14+dfsg-1+deb12u2_i386.deb e1a0432a019a9362a95bea7fa9aad984df768e60 8832 libvncserver_0.9.14+dfsg-1+deb12u2_i386-buildd.buildinfo Checksums-Sha256: 41cc3ec6698a549b37752bd643fc231b4282d20ddc3e826922deaf4d0a0035a4 156960 libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_i386.deb cc6a6ed5f7dba83ecfbd6f6c937a23785ca879ec392e4dc772978408956cf7e8 189660 libvncclient1_0.9.14+dfsg-1+deb12u2_i386.deb 5d9af1f77b19d4816b99ce5d77953632ce9024a013fc6a020ec5b97c2857a643 195404 libvncserver-dev_0.9.14+dfsg-1+deb12u2_i386.deb 6572fd52596d91e1ed979a2f3c9589ee25fd91573c82bc84e621e95b9211f7a3 305148 libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_i386.deb 8eab1e6a111e0a1e72175355f563d2cb7e6f19b352210dcdd781979cc226fea9 248412 libvncserver1_0.9.14+dfsg-1+deb12u2_i386.deb e18bc6fa9f3643e1efebe4f7c336b33f3c408b65f7cae0c2abf2c88a37f77684 8832 libvncserver_0.9.14+dfsg-1+deb12u2_i386-buildd.buildinfo Files: c9d68acfdf8694bafe69dea4fc980dea 156960 debug optional libvncclient1-dbgsym_0.9.14+dfsg-1+deb12u2_i386.deb f080e1a3099d53e61707faa3fe1ce1de 189660 libs optional libvncclient1_0.9.14+dfsg-1+deb12u2_i386.deb 015252e334c8ee68297bab862f950849 195404 libdevel optional libvncserver-dev_0.9.14+dfsg-1+deb12u2_i386.deb c16bb5f532f3568b698e7a3284b91a93 305148 debug optional libvncserver1-dbgsym_0.9.14+dfsg-1+deb12u2_i386.deb 0aa6982e53216ec49cefb92225871689 248412 libs optional libvncserver1_0.9.14+dfsg-1+deb12u2_i386.deb b046e467013ccea9c32335d1525ffa04 8832 libs optional libvncserver_0.9.14+dfsg-1+deb12u2_i386-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmpGz6cACgkQbheoBegw XLKlUBAAsKFKsJCqfI6qR19D1FXChbXk2tygpLJEG9Xhw7DgkToBvuIBo6RrHtw3 K/m2tr6XZPT8Qg+h7Ssw9xpmwNIHTtD/9WIshFVpa3zU4hCqLp0eA4MwKWMvG49B hvQNSe5hc4USqp6o3FExI47/j+x4puhqPcivwYfm0965Ru6ibK8Qolspoft4IMN8 1fQVau73D5s+KwGPC5g7VKXlD7duR+J+FG9uJHbzD3yHT6UISK+X2KIdBvp/wOo7 4ho4kLeX8+cWG0CHalnPzjq0o9Nez9/JZMuGlcRDtjMXrImmBS2clOUvl8TaW5MJ xIKeZARTCAfphdiiHiT8BC7rvNQmJ+O+lwapyRDSzIDhzk893b5DVyxybsh8WO5R /f3QttffJ/xnvegh5DSKWaIbCW2eEmaA6DDX0CezcyEZ2ptxfHePoWXmkAK8YWEm uVWpXZf4tX2XHFYQB0dPaOuk7J7LAc2J568vd46ckQO6dWau6wgrA0c+4vbc9U8Z tf3KmGRHPuu7AgeKAqfd+9tfOZPp5fE1x6yvNuHsQ8IfS5lKbsJK/HxBnnHB+RRI l0aHnCb25+oeMLqL2q+h2hXKroulw8WtHG0fnl22hyZISCZxcxVQsm34jJJ97giD Ml9D/Q9vEuUG1AyaYoismEKm+ZfMFHfuNsbbEnOdBWoKShO6Z8E= =dAMO -----END PGP SIGNATURE-----