Skip to content
GitLab
Switch branch/tag
  1. 30 Jun, 2020 1 commit
  3. 29 Jun, 2020 7 commits
  5. 31 Mar, 2020 5 commits
    • Utkarsh Gupta's avatar
      Import Debian changes 0.9.9+dfsg2-6.1+deb8u7 · cdd1d0a2
      Utkarsh Gupta authored 
      libvncserver (0.9.9+dfsg2-6.1+deb8u7) jessie-security; urgency=high

  * Non-maintainer upload by the Debian LTS team.
  * Add patch to limit width/height input values to avoid a possible
    heap overflow. (Fixes: CVE-2019-15690) (Closes: #954163)
      cdd1d0a2
    • Mike Gabriel's avatar
      Import Debian changes 0.9.9+dfsg2-6.1+deb8u6 · 28381be7
      Mike Gabriel authored 
      libvncserver (0.9.9+dfsg2-6.1+deb8u6) jessie-security; urgency=medium

  * Non-maintainer upload by the Debian LTS team.
  * CVE-2019-15681: rfbserver: don't leak stack memory to the remote.
    (Closes: #943793).
      28381be7
    • Emilio Pozuelo Monfort's avatar
      Import Debian changes 0.9.9+dfsg2-6.1+deb8u5 · 2d252c4a
      Emilio Pozuelo Monfort authored 
      libvncserver (0.9.9+dfsg2-6.1+deb8u5) jessie-security; urgency=medium

  * Non-maintainer upload by the Debian LTS Team.
  * CVE-2018-20748: incomplete fix for CVE-2018-20019 oob heap writes.
  * CVE-2018-20749: incomplete fix for CVE-2018-15127 oob heap writes.
  * CVE-2018-20750: incomplete fix for CVE-2018-15127 oob heap writes.
  * CVE-2018-15126: heap use-after-free resulting in possible RCE.
  * debian/libvncserver0.symbols: update for the symbol changes in the
    CVE-2018-15126 patch, which split a function in two with new names.
    This is not really an ABI change as these symbols are private, i.e. not
    exported in any public headers, and only exported on the DSO because
    there's no filter applied.
      2d252c4a
    • Abhijith PA's avatar
      Import Debian changes 0.9.9+dfsg2-6.1+deb8u4 · 09c104cf
      Abhijith PA authored 
      libvncserver (0.9.9+dfsg2-6.1+deb8u4) jessie-security; urgency=medium

  * Non-maintainer upload by the Debian LTS Team.
  * CVE-2018-15127: heap out-of-bound write vulnerability (Closes: #916941)
  * CVE-2018-20019: multiple heap out-of-bound write vulnerabilities
  * CVE-2018-20020: heap out-of-bound write vulnerability inside structure
    in VNC client code
  * CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code.
  * CVE-2018-20022: CWE-665: Improper Initialization vulnerability
  * CVE-2018-20023:Improper Initialization vulnerability in VNC Repeater client
    code
  * CVE-2018-20024: null pointer dereference that can result DoS
  * CVE-2018-6307: heap use-after-free vulnerability in server code of
    file transfer extension
      09c104cf
    • Markus Koschany's avatar
      Import Debian changes 0.9.9+dfsg2-6.1+deb8u3 · 1e018c15
      Markus Koschany authored 
      libvncserver (0.9.9+dfsg2-6.1+deb8u3) jessie-security; urgency=high

  * Non-maintainer upload.
  * Fix CVE-2018-7225: Uninitialized and potentially sensitive data could be
    accessed by remote attackers because the msg.cct.length in rfbserver.c was
    not sanitized. (Closes: #894045)
      1e018c15
  7. 03 Jan, 2017 4 commits
  9. 27 May, 2015 5 commits
  11. 26 May, 2015 2 commits
  13. 25 May, 2015 1 commit
  15. 11 Feb, 2015 1 commit
  17. 30 Jan, 2015 1 commit
  19. 30 Nov, 2014 1 commit
  21. 12 Aug, 2014 3 commits
  23. 10 Aug, 2014 6 commits
  25. 01 Aug, 2014 2 commits
  27. 01 Jul, 2014 1 commit