[ubuntu/questing-security] libvncserver 0.9.15+dfsg-1ubuntu0.1 (Accepted)

[Marc Deslauriers]

libvncserver (0.9.15+dfsg-1ubuntu0.1) questing-security; urgency=medium

  * SECURITY UPDATE: Heap Out-of-Bounds Read in HandleUltraZipBPP
    - debian/patches/CVE-2026-32853.patch: libvncclient: add bounds checks to
      UltraZip subrectangle parsing in src/libvncclient/ultra.c.
    - CVE-2026-32853
  * SECURITY UPDATE: NULL pointer dereferences in httpd proxy handlers
    - debian/patches/CVE-2026-32854.patch: libvncserver: fix NULL pointer
      dereferences in httpd proxy handlers in src/libvncserver/httpd.c.
    - CVE-2026-32854
  * SECURITY UPDATE: OOB write in Tight Gradient decoding
    - debian/patches/CVE-2026-44988.patch: libvncclient: fix Tight gradient
      decoding overflow in include/rfb/rfbclient.h, src/libvncclient/tight.c.
    - CVE-2026-44988

Date: 2026-06-15 16:33:18.548917+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/libvncserver/0.9.15+dfsg-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.