libvncserver (0.9.13+dfsg-3ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: heap OOB write in libvncclient Tight decoder
    - debian/patches/CVE-2026-50538.patch: Clamp numRows to the remaining
      height in libvncclient/tight.c.
    - CVE-2026-50538

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 30 Jun 2026 08:54:38 -0400

libvncserver (0.9.13+dfsg-3ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: memory leak in rfbClientCleanup()
    - debian/patches/CVE-2020-29260.patch: libvncclient: free vncRec memory in
      rfbClientCleanup() in libvncclient/vncviewer.c.
    - CVE-2020-29260
  * SECURITY UPDATE: Heap Out-of-Bounds Read in HandleUltraZipBPP
    - debian/patches/CVE-2026-32853.patch: libvncclient: add bounds checks to
      UltraZip subrectangle parsing in libvncclient/ultra.c.
    - CVE-2026-32853
  * SECURITY UPDATE: NULL pointer dereferences in httpd proxy handlers
    - debian/patches/CVE-2026-32854.patch: libvncserver: fix NULL pointer
      dereferences in httpd proxy handlers in libvncserver/httpd.c.
    - CVE-2026-32854
  * SECURITY UPDATE: OOB write in Tight Gradient decoding
    - debian/patches/CVE-2026-44988.patch: libvncclient: fix Tight gradient
      decoding overflow in rfb/rfbclient.h, libvncclient/tight.c.
    - CVE-2026-44988

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 15 Jun 2026 10:59:47 -0400

libvncserver (0.9.13+dfsg-3build2) jammy; urgency=high

  * No change rebuild for ppc64el baseline bump.

 -- Julian Andres Klode <juliank@ubuntu.com>  Thu, 24 Mar 2022 17:14:48 +0100

libvncserver (0.9.13+dfsg-3build1) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 07 Oct 2021 12:19:13 +0200

libvncserver (0.9.13+dfsg-3) unstable; urgency=medium

  * debian/watch:
    + Fix Github watch URL.

 -- Mike Gabriel <sunweaver@debian.org>  Thu, 29 Apr 2021 14:22:25 +0200

libvncserver (0.9.13+dfsg-2) unstable; urgency=medium

  [ Marco Trevisan (Treviño) ]
  * debian/patches:
    + Fix crashes when using desktop sharing with gnome-remote-desktop
      (LP: #1915410; closes: #982940).

  [ Mike Gabriel ]
  * debian/patches/series:
    + White-space cleanup.
  * debian/control:
    + Bump Standards-Version: to 4.5.1. No changes needed.
  * debian/watch:
    + Switch to format version 4.
  * debian/copyright:
    + Amend attributions. The files common/md5.* don't exist anymore.

 -- Mike Gabriel <sunweaver@debian.org>  Sun, 28 Feb 2021 15:37:06 +0100

libvncserver (0.9.13+dfsg-1) unstable; urgency=medium

  * New upstream release:
    - CVE-2018-21247: When connecting to a repeater, only send initialised
      string
    - CVE-2019-20839: libvncclient: bail out if unix socket name would overflow
    - CVE-2019-20840: fix crash because of unaligned accesses in
      hybiReadAndDecode()
    - CVE-2020-14396: libvncclient/tls_openssl: do not deref a NULL pointer
    - CVE-2020-14397: libvncserver: add missing NULL pointer checks
    - CVE-2020-14398: libvncclient: handle half-open TCP connections
    - CVE-2020-14399: libvncclient: fix pointer aliasing/alignment issue
    - CVE-2020-14400: libvncserver: fix pointer aliasing/alignment issue
    - CVE-2020-14401: libvncserver: scale: cast to 64 bit before shifting
    - CVE-2020-14402: libvncserver: encodings: prevent OOB accesses
    - CVE-2020-14403: encodings: prevent OOB accesses
    - CVE-2020-14404: libvncserver: encodings: prevent OOB accesses
    - CVE-2020-14405: libvncclient/rfbproto: limit max textchat size
  * debian/patches:
    + Drop all patches. All applied upstream.
    + Add README file explaining on our patch naming scheme.
  * debian/*.symbols:
    + Update symbols.
  * debian/control:
    + Bump DH compat level to version 13.

 -- Mike Gabriel <sunweaver@debian.org>  Mon, 29 Jun 2020 14:44:43 +0200

libvncserver (0.9.12+dfsg-9) unstable; urgency=medium

  * Bump Standards-Version: to 4.5.0. No changes needed.
  * debian/patches:
    + Add CVE-2019-15690/0001-heap-buffer-overflow.patch. (Closes: #954163).

 -- Antoni Villalonga <antoni@friki.cat>  Sat, 21 Mar 2020 12:51:24 +0100

libvncserver (0.9.12+dfsg-8) unstable; urgency=medium

  * debian/changelog:
    + Typo fix in previous upload stanza.
  * debian/patches:
    + Add 0005_LibVNCCient-fix-regression-in-tight-raw-decoding.patch.
      LibVNCClient: Fix regression in Tight/Raw decoding. (Closes: #950330).

 -- Mike Gabriel <sunweaver@debian.org>  Sat, 01 Feb 2020 23:05:21 +0100

libvncserver (0.9.12+dfsg-7) unstable; urgency=medium

  * debian/patches:
    + Add 0003_rfbserver-dont-close-fd-0-accidentally.patch and
      0004_avoid-pthread-join-if-backgroundLoop-is-FALSE.patch. Follow-up fixes
      for concurrency issue during client closure between client and
      clientOutput thread. (See #905786).

 -- Mike Gabriel <sunweaver@debian.org>  Wed, 08 Jan 2020 10:36:05 +0100

# For older changelog entries, run 'apt-get changelog libvncclient1'
