-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 29 Jun 2020 14:44:43 +0200
Source: libvncserver
Architecture: source
Version: 0.9.13+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Remote Maintainers <debian-rem...@lists.debian.org>
Changed-By: Mike Gabriel <sunwea...@debian.org>
Changes:
 libvncserver (0.9.13+dfsg-1) unstable; urgency=medium
 .
   * New upstream release:
     - CVE-2018-21247: When connecting to a repeater, only send initialised
       string
     - CVE-2019-20839: libvncclient: bail out if unix socket name would overflow
     - CVE-2019-20840: fix crash because of unaligned accesses in
       hybiReadAndDecode()
     - CVE-2020-14396: libvncclient/tls_openssl: do not deref a NULL pointer
     - CVE-2020-14397: libvncserver: add missing NULL pointer checks
     - CVE-2020-14398: libvncclient: handle half-open TCP connections
     - CVE-2020-14399: libvncclient: fix pointer aliasing/alignment issue
     - CVE-2020-14400: libvncserver: fix pointer aliasing/alignment issue
     - CVE-2020-14401: libvncserver: scale: cast to 64 bit before shifting
     - CVE-2020-14402: libvncserver: encodings: prevent OOB accesses
     - CVE-2020-14403: encodings: prevent OOB accesses
     - CVE-2020-14404: libvncserver: encodings: prevent OOB accesses
     - CVE-2020-14405: libvncclient/rfbproto: limit max textchat size
   * debian/patches:
     + Drop all patches. All applied upstream.
     + Add README file explaining on our patch naming scheme.
   * debian/*.symbols:
     + Update symbols.
   * debian/control:
     + Bump DH compat level to version 13.
Checksums-Sha1:
 b81ce8c152f99a4febd250d49b7236d53219d1b0 2326 libvncserver_0.9.13+dfsg-1.dsc
 d910dbdc6474b4ba9e33a0564cfc7d6964f2cda5 423180 
libvncserver_0.9.13+dfsg.orig.tar.xz
 4a0baa3c2bc0604357160989cd9c4a4000309065 14872 
libvncserver_0.9.13+dfsg-1.debian.tar.xz
 89d26415a3f5982a5998f6b76ba6282d7dc9ff36 8146 
libvncserver_0.9.13+dfsg-1_source.buildinfo
Checksums-Sha256:
 61e6bc6179ad506527208c175769ef952b1bc9f7e68be5c2efa168e7700e3a82 2326 
libvncserver_0.9.13+dfsg-1.dsc
 4048514b74d9e614102d60bc038de58a34dbc5eaaf1a4961b76027578e770e9d 423180 
libvncserver_0.9.13+dfsg.orig.tar.xz
 f3411343c738c1b099dbc745c09b60f3fdc670090d103a0aa92dea3bbf20ec82 14872 
libvncserver_0.9.13+dfsg-1.debian.tar.xz
 ab9e6fbacc40d315fbdf9dd3a3944489892b42f31a4455d204e48adf736e1d40 8146 
libvncserver_0.9.13+dfsg-1_source.buildinfo
Files:
 4eb0c2272ac6d2146851f3fc53fa48a3 2326 libs optional 
libvncserver_0.9.13+dfsg-1.dsc
 245a28670f3b886b20c3755b4eaeb0e3 423180 libs optional 
libvncserver_0.9.13+dfsg.orig.tar.xz
 d2fb13cf3754d4d326d05fe4a82d256b 14872 libs optional 
libvncserver_0.9.13+dfsg-1.debian.tar.xz
 0b6bd686542a0bd6100586a956e4a462 8146 libs optional 
libvncserver_0.9.13+dfsg-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=GBAu
-----END PGP SIGNATURE-----

Reply via email to