libvncserver (0.9.15+dfsg-3ubuntu0.2) resolute-security; urgency=medium

  * SECURITY UPDATE: heap OOB write in libvncclient Tight decoder
    - debian/patches/CVE-2026-50538.patch: Clamp numRows to the remaining
      height in src/libvncclient/tight.c.
    - CVE-2026-50538

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 30 Jun 2026 08:51:57 -0400

libvncserver (0.9.15+dfsg-3ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: OOB write in Tight Gradient decoding
    - debian/patches/CVE-2026-44988.patch: libvncclient: fix Tight gradient
      decoding overflow in include/rfb/rfbclient.h, src/libvncclient/tight.c.
    - CVE-2026-44988

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 15 Jun 2026 10:50:41 -0400

libvncserver (0.9.15+dfsg-3) unstable; urgency=medium

  * Team upload.
  * debian/patches:
    + CVE-2026-32853: Add 0001_CVE-2026-32853.patch fixing a heap out-of-bounds
      read (Closes: #1132016).
    + CVE-2026-32854: Add 0002_CVE-2026-32854.patch fixing NULL pointer
      dereferences in httpd proxy handlers (Closes: #1132017).

 -- Sven Geuer <sge@debian.org>  Fri, 03 Apr 2026 21:20:31 +0200

libvncserver (0.9.15+dfsg-2) unstable; urgency=medium

  * debian/patches:
    + Add 1001_CMake-4.patch. (Closes: #1113220).
  * debian/rules:
    + Cleanup build, so a rebuild from source is possible. (Closes: #1045247).

 -- Mike Gabriel <sunweaver@debian.org>  Fri, 10 Oct 2025 15:20:50 +0200

libvncserver (0.9.15+dfsg-1) unstable; urgency=medium

  * New upstream release.
  * debian/control:
    + Bump Standards-Version: to 4.7.2. No changes needed.
    + In B-D, switch from pkg-config to pkgconf.
  * debian/libvncclient1.symbols:
    + Update symbols.
  * debian/copyright:
    + Auto-generate copyright.in file for better copyright changes tracking.
    + Entirely rewrite copyright attributions.

 -- Mike Gabriel <sunweaver@debian.org>  Thu, 10 Apr 2025 12:51:42 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libvncserver1`.
