Format: 1.8 Date: Thu, 25 Sep 2014 11:20:51 -0400 Source: libvncserver Binary: libvncclient0 libvncserver0 libvncserver-dev libvncserver-config libvncclient0-dbg libvncserver0-dbg linuxvnc Architecture: armhf Version: 0.9.9+dfsg-6ubuntu1 Distribution: utopic-proposed Urgency: medium Maintainer: Ubuntu/armhf Build Daemon Changed-By: Marc Deslauriers Description: libvncclient0 - API to write one's own vnc server - client library libvncclient0-dbg - debugging symbols for libvncclient libvncserver-config - API to write one's own vnc server - library utility libvncserver-dev - API to write one's own vnc server - development files libvncserver0 - API to write one's own vnc server libvncserver0-dbg - debugging symbols for libvncserver linuxvnc - VNC server to allow remote access to a tty Changes: libvncserver (0.9.9+dfsg-6ubuntu1) utopic; urgency=medium . * SECURITY UPDATE: denial of service and possible code execution via integer overflow and lack of malloc error handling in MallocFrameBuffer() - debian/patches/CVE-2014-6051-6052.patch: check size and handle return code in libvncclient/vncviewer.c, handle return code in libvncclient/rfbproto.c. - CVE-2014-6051 - CVE-2014-6052 * SECURITY UPDATE: denial of service via large ClientCutText message - debian/patches/CVE-2014-6053.patch: check malloc result in libvncserver/rfbserver.c. - CVE-2014-6053 * SECURITY UPDATE: denial of service via zero scaling factor - debian/patches/CVE-2014-6054.patch: prevent zero scaling factor in libvncserver/rfbserver.c, check for integer overflow in libvncserver/scale.c. - CVE-2014-6054 * SECURITY UPDATE: denial of service and possible code execution via stack overflows in File Transfer feature - debian/patches/CVE-2014-6055.patch: check sizes in libvncserver/rfbserver.c. - CVE-2014-6055 Checksums-Sha1: 00bcc4bd064f85df601f2c6844886f365990cb4a 51400 libvncclient0_0.9.9+dfsg-6ubuntu1_armhf.deb 5c5bed3bd71840aabcd3c23a66cfa11bd6fb6e53 108124 libvncserver0_0.9.9+dfsg-6ubuntu1_armhf.deb fffa79a8c190932adc5a9da4503c5cfe9edf92d4 191722 libvncserver-dev_0.9.9+dfsg-6ubuntu1_armhf.deb a9d80898e216020e24dcec2bf427842a4183dc6a 20276 libvncserver-config_0.9.9+dfsg-6ubuntu1_armhf.deb 4aceabeb654904a90fb93f9466e753f21cec5235 121332 libvncclient0-dbg_0.9.9+dfsg-6ubuntu1_armhf.deb c18ccb87d6f7f232297d5ad38cc7b9b1649f51b6 345266 libvncserver0-dbg_0.9.9+dfsg-6ubuntu1_armhf.deb 0cd8e400e6c9ec3deeba8c75dd4c9576a5c0596c 15000 linuxvnc_0.9.9+dfsg-6ubuntu1_armhf.deb Checksums-Sha256: 06a0d38acd6edeb35b9f4ff719dd3049df3c263688978c67558ea919fad121f0 51400 libvncclient0_0.9.9+dfsg-6ubuntu1_armhf.deb 44836d03f2efeef75a9f30ea9d8d0d19c655575338288da8d25e9c20fb5af38c 108124 libvncserver0_0.9.9+dfsg-6ubuntu1_armhf.deb e55d0d47bae70e57071bd042f8c66c8768171f77cd7388b279b6ddc4e4fef2ad 191722 libvncserver-dev_0.9.9+dfsg-6ubuntu1_armhf.deb 6ebe56b56fc70a0be5fecb98281a317d8851ce8dd91bc8a8927a256ec5f51ad5 20276 libvncserver-config_0.9.9+dfsg-6ubuntu1_armhf.deb 61b66d5d9113171077b1d80c888b32f0ee8ac54a4ae372e832a21c39e056fb95 121332 libvncclient0-dbg_0.9.9+dfsg-6ubuntu1_armhf.deb 1a03b410a6099390e7dc1cf0f4e0a77423ce2d919f9de0f4cab81038149d81bf 345266 libvncserver0-dbg_0.9.9+dfsg-6ubuntu1_armhf.deb fb6679c89d3ff1a6f16981b62fd3a1f52b44e970ed26e5bf9d5f0491633322b4 15000 linuxvnc_0.9.9+dfsg-6ubuntu1_armhf.deb Files: 3a21f4cc4aae45c0db82aecd85fac677 51400 libs optional libvncclient0_0.9.9+dfsg-6ubuntu1_armhf.deb e04163e45e2e210e3990531668879541 108124 libs optional libvncserver0_0.9.9+dfsg-6ubuntu1_armhf.deb 00ad743d4a5975a63e1bd9c8d5fd8ea6 191722 libdevel optional libvncserver-dev_0.9.9+dfsg-6ubuntu1_armhf.deb e06728253fbe44123b62c69c68a8358d 20276 libdevel optional libvncserver-config_0.9.9+dfsg-6ubuntu1_armhf.deb 748ffba80ff443b85ccdafd019dc67ac 121332 debug extra libvncclient0-dbg_0.9.9+dfsg-6ubuntu1_armhf.deb 69631e0466caf2989c7e4d88dd833a2e 345266 debug extra libvncserver0-dbg_0.9.9+dfsg-6ubuntu1_armhf.deb 4e5e5aefbbeea35dc667b292bb66dc02 15000 net optional linuxvnc_0.9.9+dfsg-6ubuntu1_armhf.deb Original-Maintainer: Luca Falavigna