-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 Apr 2026 22:58:49 +0200 Source: libvncserver Architecture: source Version: 0.9.14+dfsg-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian Remote Maintainers Changed-By: Sven Geuer Closes: 1132016 1132017 Changes: libvncserver (0.9.14+dfsg-1+deb12u1) bookworm; urgency=medium . * Team upload. * debian/patches: + CVE-2026-32853: Add 0001_CVE-2026-32853.patch fixing a heap out-of-bounds read (Closes: #1132016). + CVE-2026-32854: Add 0002_CVE-2026-32854.patch fixing NULL pointer dereferences in httpd proxy handlers (Closes: #1132017). Checksums-Sha1: a707543cfe2d4ec880bbe7940cb6a0579252959d 2348 libvncserver_0.9.14+dfsg-1+deb12u1.dsc 179bea1e67dd3281d5f0af57f16c4ce80655b17e 16696 libvncserver_0.9.14+dfsg-1+deb12u1.debian.tar.xz fbaf448c0d6f86edfb26209a3927073d51ae0064 8878 libvncserver_0.9.14+dfsg-1+deb12u1_amd64.buildinfo Checksums-Sha256: 3a68f7a37f00e2b2fd5cd18eef5db45c81591a01d2e905e4fd3364f662959681 2348 libvncserver_0.9.14+dfsg-1+deb12u1.dsc 6cd66f294097213a4e41cb732b9c9262a4abf259d65fd0ae7eafa306b434a416 16696 libvncserver_0.9.14+dfsg-1+deb12u1.debian.tar.xz 4dd369fc4c2320cfa70dfcc35867b13ac8d9d28482488adb8cfe89cb3958a065 8878 libvncserver_0.9.14+dfsg-1+deb12u1_amd64.buildinfo Files: 583f048752a5315e21c689ca9affc244 2348 libs optional libvncserver_0.9.14+dfsg-1+deb12u1.dsc d96747479f459a0ec640c5963124ace9 16696 libs optional libvncserver_0.9.14+dfsg-1+deb12u1.debian.tar.xz 4b55e7fdab38cb9bef0ce52202f65f14 8878 libs optional libvncserver_0.9.14+dfsg-1+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJDBAEBCgAtFiEEPfXoqkP8n9/QhvGVrfUO2vit1YUFAmnUHzIPHHNnZUBkZWJp YW4ub3JnAAoJEK31Dtr4rdWFffUP/2yWLOrOeLk/PVbAv2owzuyd92gGHEuo7Cn0 BI6aW0uHCnM4mylVn545DJJig3yxM1oktQpt0v45VwZsWQJfmMz6UI+HKB6jKIkV wTm8Sw8w/IFW1+eWmHYyI6eYi14JMueWA+3kypYYH666fyhp/IgJ1pkK1uAEHhqk 5/uG8eu1/+q+hWV6T/DE05si95MQE8YmasIpTqkzJWL7Q3OJg8UqnZZU6/BIXHL+ v4fC5LE9MOSPvVwVoOlvqCMySv685KHhg3iI3IG3034SqhtviugIu3KqZRZLgnag OM14yrwUPAf1IbVzIxaW7/sIU7RIENEvcDWrlIOL4mGEcfRmqvx6vB8yh89wfYX5 M65G+AUyMeKcJZg1XdzMcSIrVIrlq4RoIRfbTfwRuK8CsqAYuUm0Wai8wYwveK47 TPBcYOUXfQowR56VSnZVWwkYo1JBqvloxo2PeEcR5nwPjzjiu7n7HVMkkcDSCWRW v/Zyp1OSBpxvGuVRP9plvV0EHj9BYBdmzOrtFPOAxU9Loors+f3c7vuQXvbOveKN Y5RWLL4NvRvlv3jV7vyLDG1h1SkY3kIZzTl/VBawZpGtUaHV6XUhHVOIIuPy9IaQ QwKIa2Wr+qmYCDCNAW3ist1DYEnx4EbyXQTgHG7Fnzxnqx47x2pTirJCHMb0LAoM /r7EfPOV =DVDv -----END PGP SIGNATURE-----