UbuntuUpdates.org

Package "libvncserver"

Name: libvncserver

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • API to write one's own VNC server - client library
  • API to write one's own VNC server - development files
  • API to write one's own VNC server
Latest version: 0.9.15+dfsg-3ubuntu0.2
Release: resolute (26.04)
Level: updates
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "libvncserver" in Resolute

Repository Area Version
base main 0.9.15+dfsg-3
security main 0.9.15+dfsg-3ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.9.15+dfsg-3ubuntu0.2 2026-07-02 20:07:54 UTC

  libvncserver (0.9.15+dfsg-3ubuntu0.2) resolute-security; urgency=medium

  * SECURITY UPDATE: heap OOB write in libvncclient Tight decoder
    - debian/patches/CVE-2026-50538.patch: Clamp numRows to the remaining
      height in src/libvncclient/tight.c.
    - CVE-2026-50538

 -- Marc Deslauriers <email address hidden> Tue, 30 Jun 2026 08:51:57 -0400
Source diff to previous version
CVE-2026-50538 Attacker-controlled heap out-of-bounds write in libvncclient Tight decoder

Version: 0.9.15+dfsg-3ubuntu0.1 2026-06-23 17:07:56 UTC

  libvncserver (0.9.15+dfsg-3ubuntu0.1) resolute-security; urgency=medium

  * SECURITY UPDATE: OOB write in Tight Gradient decoding
    - debian/patches/CVE-2026-44988.patch: libvncclient: fix Tight gradient
      decoding overflow in include/rfb/rfbclient.h, src/libvncclient/tight.c.
    - CVE-2026-44988

 -- Marc Deslauriers <email address hidden> Mon, 15 Jun 2026 10:50:41 -0400
CVE-2026-44988 LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-


About   -   Send Feedback to @ubuntu_updates