Publishing details

• Published on 2020-09-28
• Copied from ubuntu bionic in PPA for Ubuntu Security Proposed by Mike Salvatore

Changelog

italc (1:3.0.3+dfsg1-3ubuntu0.1) bionic-security; urgency=medium

  * SECURITY UPDATE: merge security patches from debian for heap overflows
    - debian/patches/libvncserver_CVE-2018-7225.patch: Uninitialized and
      potentially sensitive data could be accessed by remote attackers because
      the msg.cct.length in rfbserver.c was not sanitized.
    - debian/patches/libvnc_server+client_CVE-2018-15127-CVE-2018-20019.patch:
      heap out-of-bound write vulnerability.
    - debian/patches/libvncclient_CVE-2018-20020.patch: heap out-of-bound
      write vulnerability inside structure in VNC client code.
    - debian/patches/libvncclient_CVE-2018-20021.patch: CWE-835: Infinite loop
      vulnerability in VNC client code.
    - debian/patches/libvncclient_CVE-2018-20022.patch: CWE-665: Improper
      Initialization vulnerability.
    - debian/patches/libvncclient_CVE-2018-20023.patch: Improper
      Initialization vulnerability in VNC Repeater client code.
    - debian/patches/libvncclient_CVE-2018-20024.patch: null pointer
      dereference that can result DoS.
    - debian/patches/libvncclient_CVE-2018-20748-1.patch: ignore server-sent
      cut text longer than 1MB
    - debian/patches/libvncclient_CVE-2018-20748-2.patch: ignore server-sent
      reasong strings longer than 1MB
    - debian/patches/libvncclient_CVE-2018-20748-3.patch: fail on server-sent
      desktop name lengths longer than 1MB
    - debian/patches/libvncclient_CVE-2018-20748-4.patch: remove now-useless
      cast
    - debian/patches/libvncserver_CVE-2018-20749.patch: incomplete fix for
      CVE-2018-15127 oob heap writes.
    - debian/patches/libvncserver_CVE-2018-20750.patch: incomplete fix for
      CVE-2018-15127 oob heap writes.
    - debian/patches/libvncserver_CVE-2019-15681.patch: rfbserver: don't leak
      stack memory to the remote.
    - CVE-2018-7225
    - CVE-2018-15127
    - CVE-2018-20019
    - CVE-2018-20020
    - CVE-2018-20021
    - CVE-2018-20022
    - CVE-2018-20023
    - CVE-2018-20024
    - CVE-2018-20748
    - CVE-2018-20749
    - CVE-2018-20750
    - CVE-2019-15681

 -- Mike Salvatore <email address hidden>  Thu, 24 Sep 2020 11:19:00 -0400

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• s390x

Built packages

• italc-client intelligent Teaching And Learning with Computers - client

• italc-client-dbgsym debug symbols for italc-client

• italc-management-console intelligent Teaching And Learning with Computers - management console

• italc-management-console-dbgsym debug symbols for italc-management-console

• italc-master intelligent Teaching And Learning with Computers - master

• italc-master-dbgsym debug symbols for italc-master

• libitalccore intelligent Teaching And Learning with Computers - libraries

• libitalccore-dbgsym debug symbols for libitalccore

Package files

• italc-client-dbgsym_3.0.3+dfsg1-3ubuntu0.1_amd64.ddeb (3.2 MiB)
• italc-client-dbgsym_3.0.3+dfsg1-3ubuntu0.1_arm64.ddeb (3.2 MiB)
• italc-client-dbgsym_3.0.3+dfsg1-3ubuntu0.1_armhf.ddeb (3.1 MiB)
• italc-client-dbgsym_3.0.3+dfsg1-3ubuntu0.1_i386.ddeb (3.0 MiB)
• italc-client-dbgsym_3.0.3+dfsg1-3ubuntu0.1_ppc64el.ddeb (3.2 MiB)
• italc-client-dbgsym_3.0.3+dfsg1-3ubuntu0.1_s390x.ddeb (3.3 MiB)
• italc-client_3.0.3+dfsg1-3ubuntu0.1_amd64.deb (599.8 KiB)
• italc-client_3.0.3+dfsg1-3ubuntu0.1_arm64.deb (541.1 KiB)
• italc-client_3.0.3+dfsg1-3ubuntu0.1_armhf.deb (558.9 KiB)
• italc-client_3.0.3+dfsg1-3ubuntu0.1_i386.deb (618.3 KiB)
• italc-client_3.0.3+dfsg1-3ubuntu0.1_ppc64el.deb (596.5 KiB)
• italc-client_3.0.3+dfsg1-3ubuntu0.1_s390x.deb (559.1 KiB)
• italc-management-console-dbgsym_3.0.3+dfsg1-3ubuntu0.1_amd64.ddeb (1.5 MiB)
• italc-management-console-dbgsym_3.0.3+dfsg1-3ubuntu0.1_arm64.ddeb (1.5 MiB)
• italc-management-console-dbgsym_3.0.3+dfsg1-3ubuntu0.1_armhf.ddeb (1.5 MiB)
• italc-management-console-dbgsym_3.0.3+dfsg1-3ubuntu0.1_i386.ddeb (1.4 MiB)
• italc-management-console-dbgsym_3.0.3+dfsg1-3ubuntu0.1_ppc64el.ddeb (1.5 MiB)
• italc-management-console-dbgsym_3.0.3+dfsg1-3ubuntu0.1_s390x.ddeb (1.5 MiB)
• italc-management-console_3.0.3+dfsg1-3ubuntu0.1_amd64.deb (117.9 KiB)
• italc-management-console_3.0.3+dfsg1-3ubuntu0.1_arm64.deb (114.0 KiB)
• italc-management-console_3.0.3+dfsg1-3ubuntu0.1_armhf.deb (115.1 KiB)
• italc-management-console_3.0.3+dfsg1-3ubuntu0.1_i386.deb (123.0 KiB)
• italc-management-console_3.0.3+dfsg1-3ubuntu0.1_ppc64el.deb (114.8 KiB)
• italc-management-console_3.0.3+dfsg1-3ubuntu0.1_s390x.deb (115.1 KiB)
• italc-master-dbgsym_3.0.3+dfsg1-3ubuntu0.1_amd64.ddeb (3.1 MiB)
• italc-master-dbgsym_3.0.3+dfsg1-3ubuntu0.1_arm64.ddeb (3.1 MiB)
• italc-master-dbgsym_3.0.3+dfsg1-3ubuntu0.1_armhf.ddeb (3.1 MiB)
• italc-master-dbgsym_3.0.3+dfsg1-3ubuntu0.1_i386.ddeb (3.1 MiB)
• italc-master-dbgsym_3.0.3+dfsg1-3ubuntu0.1_ppc64el.ddeb (3.1 MiB)
• italc-master-dbgsym_3.0.3+dfsg1-3ubuntu0.1_s390x.ddeb (3.3 MiB)
• italc-master_3.0.3+dfsg1-3ubuntu0.1_amd64.deb (270.4 KiB)
• italc-master_3.0.3+dfsg1-3ubuntu0.1_arm64.deb (260.3 KiB)
• italc-master_3.0.3+dfsg1-3ubuntu0.1_armhf.deb (260.8 KiB)
• italc-master_3.0.3+dfsg1-3ubuntu0.1_i386.deb (282.8 KiB)
• italc-master_3.0.3+dfsg1-3ubuntu0.1_ppc64el.deb (265.1 KiB)
• italc-master_3.0.3+dfsg1-3ubuntu0.1_s390x.deb (265.0 KiB)
• italc_3.0.3+dfsg1-3ubuntu0.1.debian.tar.xz (74.3 KiB)
• italc_3.0.3+dfsg1-3ubuntu0.1.dsc (2.6 KiB)
• italc_3.0.3+dfsg1.orig.tar.xz (1.7 MiB)
• libitalccore-dbgsym_3.0.3+dfsg1-3ubuntu0.1_amd64.ddeb (3.9 MiB)
• libitalccore-dbgsym_3.0.3+dfsg1-3ubuntu0.1_arm64.ddeb (3.9 MiB)
• libitalccore-dbgsym_3.0.3+dfsg1-3ubuntu0.1_armhf.ddeb (3.9 MiB)
• libitalccore-dbgsym_3.0.3+dfsg1-3ubuntu0.1_i386.ddeb (3.8 MiB)
• libitalccore-dbgsym_3.0.3+dfsg1-3ubuntu0.1_ppc64el.ddeb (3.9 MiB)
• libitalccore-dbgsym_3.0.3+dfsg1-3ubuntu0.1_s390x.ddeb (4.1 MiB)
• libitalccore_3.0.3+dfsg1-3ubuntu0.1_amd64.deb (746.8 KiB)
• libitalccore_3.0.3+dfsg1-3ubuntu0.1_arm64.deb (724.0 KiB)
• libitalccore_3.0.3+dfsg1-3ubuntu0.1_armhf.deb (725.7 KiB)
• libitalccore_3.0.3+dfsg1-3ubuntu0.1_i386.deb (763.6 KiB)
• libitalccore_3.0.3+dfsg1-3ubuntu0.1_ppc64el.deb (737.7 KiB)
• libitalccore_3.0.3+dfsg1-3ubuntu0.1_s390x.deb (732.5 KiB)