[ubuntu/bionic-proposed] libvncserver 0.9.11+dfsg-1ubuntu1 (Accepted)

[Marc Deslauriers]

libvncserver (0.9.11+dfsg-1ubuntu1) bionic; urgency=medium

  * SECURITY UPDATE: integer overflow or memory access
    - debian/patches/CVE-2018-7225.patch: limit client cut text length to
      1 MB in libvncserver/rfbserver.c.
    - CVE-2018-7225

Date: Fri, 30 Mar 2018 10:33:35 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libvncserver/0.9.11+dfsg-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 30 Mar 2018 10:33:35 -0400
Source: libvncserver
Binary: libvncclient1 libvncserver1 libvncserver-dev libvncserver-config libvncclient1-dbg libvncserver1-dbg
Architecture: source
Version: 0.9.11+dfsg-1ubuntu1
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 libvncclient1 - API to write one's own VNC server - client library
 libvncclient1-dbg - debugging symbols for libvncclient
 libvncserver-config - API to write one's own VNC server - library utility
 libvncserver-dev - API to write one's own VNC server - development files
 libvncserver1 - API to write one's own VNC server
 libvncserver1-dbg - debugging symbols for libvncserver
Changes:
 libvncserver (0.9.11+dfsg-1ubuntu1) bionic; urgency=medium
 .
   * SECURITY UPDATE: integer overflow or memory access
     - debian/patches/CVE-2018-7225.patch: limit client cut text length to
       1 MB in libvncserver/rfbserver.c.
     - CVE-2018-7225
Checksums-Sha1:
 f9bb80cb07976f77e3f1a78b1f53004393e184da 2473 libvncserver_0.9.11+dfsg-1ubuntu1.dsc
 24b5bbfd9bab127d2a9893ec37c053f0d4589b96 13768 libvncserver_0.9.11+dfsg-1ubuntu1.debian.tar.xz
 fe530d232ee2e9ed3ac63f4a123ce63e4fa9e98e 6622 libvncserver_0.9.11+dfsg-1ubuntu1_source.buildinfo
Checksums-Sha256:
 d26d6b2506113260caa85b34ccfbab4d8783c1e1bad7716312d01fd23234acf4 2473 libvncserver_0.9.11+dfsg-1ubuntu1.dsc
 aadfb1505a7b1a8349a22ebf4fa29bc69fece35d0f71946fc767c211ba63fab5 13768 libvncserver_0.9.11+dfsg-1ubuntu1.debian.tar.xz
 689284a80bbce1d41af15e4056e7ae581269bc8dda405c173be0f65f10a12457 6622 libvncserver_0.9.11+dfsg-1ubuntu1_source.buildinfo
Files:
 0a68a2d7055fd6375f16c7d1cc11222d 2473 libs optional libvncserver_0.9.11+dfsg-1ubuntu1.dsc
 72dffe90445096cf56b1e3f7479b81de 13768 libs optional libvncserver_0.9.11+dfsg-1ubuntu1.debian.tar.xz
 d6854b76c6d19ff985988566de33f367 6622 libs optional libvncserver_0.9.11+dfsg-1ubuntu1_source.buildinfo
Original-Maintainer: Peter Spiess-Knafl <dev at spiessknafl.at>

-----BEGIN PGP SIGNATURE-----
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=Q7eY
-----END PGP SIGNATURE-----