Debian
libvncserver package

libvncserver 0.9.11+dfsg-1.3 source package in Debian

Changelog

libvncserver (0.9.11+dfsg-1.3) unstable; urgency=medium

  * Non-maintainer upload.
  * LibVNCClient: ignore server-sent cut text longer than 1MB (CVE-2018-20748)
    (Closes: #920941)
  * LibVNCClient: ignore server-sent reason strings longer than 1MB
    (CVE-2018-20748) (Closes: #920941)
  * LibVNCClient: fail on server-sent desktop name lengths longer than 1MB
    (CVE-2018-20748) (Closes: #920941)
  * LibVNCClient: remove now-useless cast (CVE-2018-20748) (Closes: #920941)
  * Error out in rfbProcessFileTransferReadBuffer if length can not be
    allocated (CVE-2018-20749) (Closes: #920941)
  * Limit lenght to INT_MAX bytes in rfbProcessFileTransferReadBuffer()
    (CVE-2018-20750) (Closes: #920941)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 30 Jan 2019 22:39:15 +0100

Upload details

Uploaded by:
Peter Spiess-Knafl
Uploaded to:
Sid
Original maintainer:
Peter Spiess-Knafl
Architectures:
any
Section:
x11
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Downloads

File Size SHA-256 Checksum
libvncserver_0.9.11+dfsg-1.3.dsc 2.5 KiB f3f01f4d3e5dbc6eae9b067c5972de27b027f4457c5fb62b9bf9bd4c078479fb
libvncserver_0.9.11+dfsg.orig.tar.gz 513.4 KiB ea27be2b923cc5e89fb2d93415fdc2373c90cdd2379cf9c671fa234482c69509
libvncserver_0.9.11+dfsg-1.3.debian.tar.xz 20.7 KiB fcbb00848a548f15e151b293639cd1576591d894b7101682c659f36cf78e8bf7

No changes file available.

Binary packages built by this source