-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 03 Apr 2026 21:20:31 +0200 Source: libvncserver Architecture: source Version: 0.9.15+dfsg-3 Distribution: unstable Urgency: medium Maintainer: Debian Remote Maintainers <debian-remote@lists.debian.org> Changed-By: Sven Geuer <sge@debian.org> Closes: 1132016 1132017 Changes: libvncserver (0.9.15+dfsg-3) unstable; urgency=medium . * Team upload. * debian/patches: + CVE-2026-32853: Add 0001_CVE-2026-32853.patch fixing a heap out-of-bounds read (Closes: #1132016). + CVE-2026-32854: Add 0002_CVE-2026-32854.patch fixing NULL pointer dereferences in httpd proxy handlers (Closes: #1132017). Checksums-Sha1: f02baf4cc26575b327efed5476525fedeb821228 2313 libvncserver_0.9.15+dfsg-3.dsc b676cf72ed6318640b75e80d462f6a62e7b33e60 19680 libvncserver_0.9.15+dfsg-3.debian.tar.xz 8e8cefee7fd9460bdad68bf262389c9cb92c6760 8471 libvncserver_0.9.15+dfsg-3_amd64.buildinfo Checksums-Sha256: 0e4955de6337e3718bb10e3c7d0332f7416462aec06342d30eff1c001f511f44 2313 libvncserver_0.9.15+dfsg-3.dsc f5e6d5941520b0549aaba602f787fb3f0c85438f8efb4db811726d52f93aa2d8 19680 libvncserver_0.9.15+dfsg-3.debian.tar.xz 5981df0c21261821c468e0398c2e4efcb0f732da4fedee5a1c0431216725b6e4 8471 libvncserver_0.9.15+dfsg-3_amd64.buildinfo Files: f953c6426dccab6252c925674aefe693 2313 libs optional libvncserver_0.9.15+dfsg-3.dsc cbb47e01987600f5a7d5c779beb5cfbf 19680 libs optional libvncserver_0.9.15+dfsg-3.debian.tar.xz 50a778797d47a05c7f840cc27906d986 8471 libs optional libvncserver_0.9.15+dfsg-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJDBAEBCgAtFiEEPfXoqkP8n9/QhvGVrfUO2vit1YUFAmnQFV0PHHNnZUBkZWJp YW4ub3JnAAoJEK31Dtr4rdWFdbYQAL15WUWJh/lDr3OTRbm/MT6P/+Oe4da7Dp9P L7723OAupKSGS+DpV4ervXnu03Qj58cxBAgH3CEsF6n0mau42Qu4e2Lfqn7HW7OB 7b4XGlMMz9xEkB6NZewpe7LvGErD8pfMJtdL5qFldDccZbxH0KO1ksQ1hjBBa66y FpR0i1hBsjJrSmk71p2u/5gTbO16QTtCgU7/u6hjWt5fHMpiunM3+9uyNndU+QkR 3l632DpIZRLFrAGZLr35h8yesrZtJ3Pm3A8qQ2L0uQ4uLmT4od10eU/MzqYBjDE8 WaD0alsuOnqK4iYxNW+Mtjzc0DKRdOibPNW9zKYet9TvsyJK3BhWeJkY04JKn4pA J54TIPGHVCSHGpdW1x3MsW0mnUxUi36tVbE+IIbDAxaayS8FRzywvpTo9IPded/f ALSsiursIhkTYHz3UBzT4tnYeTlL7Y5Iv90uzKSzfl1sVwp9zQiCCp/JWZ0pVobo Unk+Ze2UXko+GQITjJYrQYGqA1QLhVEX2Uony+8UfmKsJ013EmMdBp8Vu+QzNLmy FeL7V3HcyfnUsx/0hPMkpefegyVV6N4m83eZo05/xefE1q+i35mRvhYCq9jXma/+ CyiUGYX8uZs+8A2cwqF7xTs8JvLr/GksaIEEZROE3rb6Nnlp6jMJo53fF04fjckH BDk5qmzg =g1WI -----END PGP SIGNATURE-----