-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 05 Jan 2017 23:35:23 +0100 Source: tigervnc Binary: tigervnc-common tigervnc-scraping-server tigervnc-standalone-server tigervnc-xorg-extension tigervnc-viewer Architecture: source amd64 Version: 1.7.0+dfsg-2 Distribution: unstable Urgency: high Maintainer: TigerVNC Packaging Team <pkg-tigervnc-devel@lists.alioth.debian.org> Changed-By: Ola Lundqvist <opal@debian.org> Description: tigervnc-common - Virtual network computing; Common software needed by servers tigervnc-scraping-server - Virtual network computing server performing X screen scraping tigervnc-standalone-server - Standalone virtual network computing server tigervnc-viewer - Virtual network computing client for X tigervnc-xorg-extension - Virtual network computing X server extension Closes: 849996 850054 Changes: tigervnc (1.7.0+dfsg-2) unstable; urgency=high . [ Ola Lundqvist ] * Increased the update-alternatives priority so that this package will have precedence over tightvnc and vnc4 that we hope to soon replace. . [ Joachim Falk ] * Fixed spurious next cmd; in tigervncserver wrapper script. Leads to bug if tigervnc-common package is also installed. Closes: #849996 and Closes: #850054. * Fixed bug if killing a non-existing tigervncserver, i.e., tigervncserver -kill :17 Use of uninitialized value $pid in concatenation (.) or string at /usr/bin/tigervncserver line 493. Can't kill a non-numeric process ID at /usr/bin/tigervncserver line 495. Killing Xtigervnc process ID ... * Fixed bug in tigervncserver wrapper script. An option -localhost without an argument is true, i.e., only listen on localhost for vnc connections, not false! * Fixed bug in tigervncserver wrapper script. Correctly propagate -localhost option to remote host if tigervncserver should start the Xtigervnc server on a remote host via ssh, e.g., as requested by the following command: - tigervncserver -localhost no <some remote server>:nn. * Fixed bug in tigervncserver wrapper script. Now allow -list and -kill commands to be executed on a remote host, e.g., as requested by the following commands: - tigervncserver -kill <some remote server>[:nn] or - tigervncserver -list <some remote server>. * Feature: Be a little more helpful after a remote tigervncserver sessions has been started. Give the user the xtigervncviewer command that can be used to connect to the started remote session. * Fixed support for security types Plain, TLSPlain, and X509Plain. We now have support for the -SecurityTypes option in the tigervncserver wrapper script. Moreover, we now ship a tigervnc PAM service file required for password authentication via PAM in the tigervncserver-common package. The presence of tigervncserver-common will also be checked by the tigervncserver wrapper script if at least one of the three plain security types is used. * Feature: Better support for security types X509None, X509Vnc, and X509Plain. We now have support for the -X509Cert and -X509Key options in the tigervncserver wrapper script. Moreover, if the user does not specify a certificate and key when at least one of the three X509 security types is used, then we will generate a self signed certificate for the tigervnc server if it is not already present. * Update the descriptions in /etc/vnc.conf to conform to the real behavior and options of the tigervncserver wrapper script. Reordered default option definitions in the tigervncserver wrapper script to conform to the order the options are documented in the /etc/vnc.conf configuration file. * Fixed bug in tigervncserver wrapper script. The option $getDefaultFrom is documented in the /etc/vnc.conf configuration file, but was ignored in the wrapper script. * Some love for the -xdisplaydefaults and -wmDecoration options. Now only apply -wmDecoration shrinkage if -xdisplaydefaults is used. The geometry specified in /etc/vnc.conf and ~/.vnc/vnc.conf is no longer influenced by wmDecoration. This is now the same behavior as the geometry specified by the commonalind via -g NNxMM. Morover, use reasonable defaults for -wmDecoration for the desktops contained in debian stretch. * Fixed bug in tigervncserver wrapper script. The option -useold should start a tigervncserver if it is not already running and not complain that there is none running. This already worked when a desired display number was given, but did not work when no display number was specified. * Updated tigervncserver man page. * Feature: Implement the -xstartup and -noxstartup options in the tigervncserver wrapper script. These options are from the vncserver wrapper script shipped with TigerVNC. Let our startup script be compatible with theirs. These options are already documented in the updated tigervncserver man page. * Security hardening: The user can easily expose a VNC server to the internet without any authentication by specifying tigervncserver -localhost no -SecurityTypes None|TLSNone|X509None. Moreover, previously we switched the default from -localhost yes to -localhost no when a TLS* or X509* security type was given via -SecurityTypes. From now on, we will give a stern warning and refuse to start the VNC server when a *None security type is combined with -localhost no. To continue, the user has to provide the option --I-KNOW-THIS-IS-INSECURE. If a *None security type is used with localhost access, the user will merely get a polite warning. * Fixed bug in tigervncserver wrapper script when options are forwarded to a remote tigervncserver script. In this case, the ssh call introduces one level of shell execution. Thus, the options must be shell escaped. * Updated vnc.conf man page. Checksums-Sha1: 53f9ff799e0ad2c150ca8c74906b6d328d9e53bf 4451 tigervnc_1.7.0+dfsg-2.dsc 98a94c5643c36aa9c1a9705248ca9257d83a2d8c 52308 tigervnc_1.7.0+dfsg-2.debian.tar.xz fe9b75504449d63b7634a455c803f0930655c51e 235766 tigervnc-common-dbgsym_1.7.0+dfsg-2_amd64.deb b11a2a65daa0aedcfc1dad4c98c38502d1f326fc 65930 tigervnc-common_1.7.0+dfsg-2_amd64.deb 967a2014289aa6d79fa69a917661f3d2800d481a 1152206 tigervnc-scraping-server-dbgsym_1.7.0+dfsg-2_amd64.deb e8e7065719e3e3831bcc12dbecfa9dd9ca668982 187582 tigervnc-scraping-server_1.7.0+dfsg-2_amd64.deb 12126327de4b3a6d44c4cb7cedc0f1073035c819 5833140 tigervnc-standalone-server-dbgsym_1.7.0+dfsg-2_amd64.deb 995f678ce00f4b8c05380e65afe21e0fe285327a 994774 tigervnc-standalone-server_1.7.0+dfsg-2_amd64.deb bd41dac763c412bb3d0fd68823dd8e90112708b1 1008534 tigervnc-viewer-dbgsym_1.7.0+dfsg-2_amd64.deb 27afe0e4227a746341a9aa13f238e2d86d7aea12 166874 tigervnc-viewer_1.7.0+dfsg-2_amd64.deb 0d5c68ceefa54c348f483c775925bcef623da9f6 1309490 tigervnc-xorg-extension-dbgsym_1.7.0+dfsg-2_amd64.deb 3a341d65d77cbd08c5721caa3d08c237252b5611 196342 tigervnc-xorg-extension_1.7.0+dfsg-2_amd64.deb e4202e851ca832d273b739a0273cd275b8cd34e6 14156 tigervnc_1.7.0+dfsg-2_amd64.buildinfo Checksums-Sha256: a76e59f0e5760ce9551e30d6f4caeff9645ae0ddf0af323221ffdcf23d9f89fe 4451 tigervnc_1.7.0+dfsg-2.dsc 950cd9719e2443188fa00f565bcef4d96a2b3ad92a98ba5c4a7e4dcb3a462500 52308 tigervnc_1.7.0+dfsg-2.debian.tar.xz 3b9f3918083f4bb2c4013b4fa147e6b2bf07032118865f8e987c286e42106553 235766 tigervnc-common-dbgsym_1.7.0+dfsg-2_amd64.deb 8eb5ea6567159221d60330ba138b34151668146bd87722969f0e755384a0311b 65930 tigervnc-common_1.7.0+dfsg-2_amd64.deb cb095298d6d61878bdfb6105a649dd6dbf7036a006959bc326d96bf096757a16 1152206 tigervnc-scraping-server-dbgsym_1.7.0+dfsg-2_amd64.deb dfabfc67c42d3933e374ec129593006fc9dc4933cdc764d0188e2d933dc644b5 187582 tigervnc-scraping-server_1.7.0+dfsg-2_amd64.deb 5941af9eae3573b806392622ce5695b7f0e5b88129ba5c15a0bd2f916b25f7e5 5833140 tigervnc-standalone-server-dbgsym_1.7.0+dfsg-2_amd64.deb 5b61cf890cff33d79907be922ed76d8847ac88a0898064d18cc1cc28846b71e4 994774 tigervnc-standalone-server_1.7.0+dfsg-2_amd64.deb 285bd300a9f39e24ef92c0f6e7dde91b888787a92331f19e4dc0efbcdaa2523c 1008534 tigervnc-viewer-dbgsym_1.7.0+dfsg-2_amd64.deb 2a17b28abfed3617c6b9f7d795f96db1773b34b63598b6e0eb766fac965f4219 166874 tigervnc-viewer_1.7.0+dfsg-2_amd64.deb 94cc856ef4d270b273f3543296cb1df15067348750acd0dc13491e773b651d49 1309490 tigervnc-xorg-extension-dbgsym_1.7.0+dfsg-2_amd64.deb 0e17c5d09fd5dc761d841b1be3207325cd24ff80441c78b86ac5c967209d6d44 196342 tigervnc-xorg-extension_1.7.0+dfsg-2_amd64.deb 3b7f2f3c86be41640a14b8bc5791537f328394927f5b1f26c51c110f0ac73f59 14156 tigervnc_1.7.0+dfsg-2_amd64.buildinfo Files: 515170e99ca5747974f46f1475fca4ee 4451 x11 optional tigervnc_1.7.0+dfsg-2.dsc eaa904f95137e406d9680ee8dcffb2a6 52308 x11 optional tigervnc_1.7.0+dfsg-2.debian.tar.xz b6a7ba8f28a6f04bfea002099e305b22 235766 debug extra tigervnc-common-dbgsym_1.7.0+dfsg-2_amd64.deb 465603f8087ba6a080e21c0f5233b242 65930 x11 optional tigervnc-common_1.7.0+dfsg-2_amd64.deb 0118347564ac63c4f922912e051f3aa3 1152206 debug extra tigervnc-scraping-server-dbgsym_1.7.0+dfsg-2_amd64.deb 8fde83dc72b0d7c302ac0203bb08f477 187582 x11 optional tigervnc-scraping-server_1.7.0+dfsg-2_amd64.deb 4e0db3f3b74a813c9f48926d36302416 5833140 debug extra tigervnc-standalone-server-dbgsym_1.7.0+dfsg-2_amd64.deb 13ef5b88f1936660a04596f6496f7875 994774 x11 optional tigervnc-standalone-server_1.7.0+dfsg-2_amd64.deb 579a0a488467a9f5dbc42332f40380a9 1008534 debug extra tigervnc-viewer-dbgsym_1.7.0+dfsg-2_amd64.deb 239ae01cfb2516712ed689ee139d2415 166874 x11 optional tigervnc-viewer_1.7.0+dfsg-2_amd64.deb 187e6f5782555ffd1fd4ef0390748efd 1309490 debug extra tigervnc-xorg-extension-dbgsym_1.7.0+dfsg-2_amd64.deb 38fbb08cca416aca8b54315e7636e058 196342 x11 optional tigervnc-xorg-extension_1.7.0+dfsg-2_amd64.deb 36ad9c6826b74e7f4553b605b34dab9a 14156 x11 optional tigervnc_1.7.0+dfsg-2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEIvIyxrHg9L8rJgpqXpDc+pQmh28FAlhuzB4ACgkQXpDc+pQm h28NIhAAk4hfdNvQznwMx9FoBYkAK6o+V7850ALphFpjnRfc/xqT4SWvaJ5IJLui lexYHG31QeJmGIVLZXxNJmY9YPZZOvNvhB1CFNc7cuArDDsN8KE1vPM2sifVd5wf uMpLX7nRVLh7eQswZ1lI6zsygRY9bgcp7pCBSrnWgi1OWmx3eZj71uocZcUhaf9v 6+FJqEWGxCnbZg5mHbvpBnmNacRAVZ7bKmq+bYvs89EOhwAKGS2wmrSf573PZ+HC 9RYzm6E2d3kzd46e4LVHGHzELTUbLMuebFwa9+Ls4TSsIskEt9oPIFuqeiNtojjt XAY5Ri50FKjZU1dYW2tbBa3n4W+GorqecRsYMZ4IJyMO8Q1+bletV3RJL2IQrdf+ 4q3CefXjbyLJ9UmFFQ28VNYXTqPO0H0w9pJVE6xXQLu64NpdS08Rh8C76Fa1gdwK GFdf193XV1vaztBvXraEbXRAffMrQaPhJNWB0ceqCEPtd3tF6iZadh1VHv6FqXAf S8V68DKyEXU0tVXPbQbdChPG0ZkIw10ZAfCYo/Zr8KGC1on31sr2dXTFcleZxixQ hAZLH61OVqTQsgB/9T79/BK+pCLbrHls4Q7NlhC7UWRrNAPJRXcPSw1qX50qwu0l JZJKQyAVr4zdc48vjhb1g7CVHlsX/awqQBxewC+kI85sJvZjhMU= =4Lc+ -----END PGP SIGNATURE-----
