Register | Log in

libvncserver

Choose email to subscribe with

general

source: libvncserver (main)
version: 0.9.15+dfsg-5
maintainer: Debian Remote Maintainers (archive) (DMD)
uploaders: Mike Gabriel [DMD]
arch: any
std-ver: 4.7.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.9.13+dfsg-2+deb11u1
oldstable: 0.9.14+dfsg-1+deb12u1
stable: 0.9.15+dfsg-1+deb13u1
testing: 0.9.15+dfsg-4
unstable: 0.9.15+dfsg-5

versioned links

0.9.13+dfsg-2+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.14+dfsg-1+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.15+dfsg-1+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.15+dfsg-4: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.15+dfsg-5: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libvncclient1 (1 bugs: 0, 1, 0, 0)
libvncserver-dev
libvncserver1

action needed

2 security issues in trixie high

There are 2 open security issues in trixie.

2 important issues:

CVE-2026-44988: LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but it does not reject Tight rectangles whose width is larger than 2048 pixels. A malicious VNC server can send a crafted FramebufferUpdate rectangle using Tight encoding with NoZlib | ExplicitFilter and the Gradient filter. When a LibVNCClient-based client connects, the client processes the server-controlled rectangle width and writes beyond fixed-size Gradient buffers. This vulnerability is fixed with commit 5b270544b85233668b98161323297d418a8f5fd1.
TEMP-1138253-9E600E:

Created: 2026-05-27 Last update: 2026-05-30 09:01

2 security issues in forky high

There are 2 open security issues in forky.

2 important issues:

CVE-2026-44988: LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but it does not reject Tight rectangles whose width is larger than 2048 pixels. A malicious VNC server can send a crafted FramebufferUpdate rectangle using Tight encoding with NoZlib | ExplicitFilter and the Gradient filter. When a LibVNCClient-based client connects, the client processes the server-controlled rectangle width and writes beyond fixed-size Gradient buffers. This vulnerability is fixed with commit 5b270544b85233668b98161323297d418a8f5fd1.
TEMP-1138253-9E600E:

Created: 2026-05-27 Last update: 2026-05-30 09:01

4 security issues in bullseye high

There are 4 open security issues in bullseye.

2 important issues:

CVE-2026-44988: LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but it does not reject Tight rectangles whose width is larger than 2048 pixels. A malicious VNC server can send a crafted FramebufferUpdate rectangle using Tight encoding with NoZlib | ExplicitFilter and the Gradient filter. When a LibVNCClient-based client connects, the client processes the server-controlled rectangle width and writes beyond fixed-size Gradient buffers. This vulnerability is fixed with commit 5b270544b85233668b98161323297d418a8f5fd1.
TEMP-1138253-9E600E:

2 issues postponed or untriaged:

CVE-2026-32853: (postponed; to be fixed through a stable update) LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicious VNC server to cause information disclosure or application crash. Attackers can exploit improper bounds checking in the HandleUltraZipBPP() function by manipulating subrectangle header counts to read beyond the allocated heap buffer.
CVE-2026-32854: (postponed; to be fixed through a stable update) LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput() in httpd.c that allow remote attackers to cause a denial of service by sending specially crafted HTTP requests. Attackers can exploit missing validation of strchr() return values in the CONNECT and GET proxy handling paths to trigger null pointer dereferences and crash the server when httpd and proxy features are enabled.

Created: 2026-05-27 Last update: 2026-05-30 09:01

2 security issues in bookworm high

There are 2 open security issues in bookworm.

2 important issues:

CVE-2026-44988: LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but it does not reject Tight rectangles whose width is larger than 2048 pixels. A malicious VNC server can send a crafted FramebufferUpdate rectangle using Tight encoding with NoZlib | ExplicitFilter and the Gradient filter. When a LibVNCClient-based client connects, the client processes the server-controlled rectangle width and writes beyond fixed-size Gradient buffers. This vulnerability is fixed with commit 5b270544b85233668b98161323297d418a8f5fd1.
TEMP-1138253-9E600E:

Created: 2026-05-27 Last update: 2026-05-30 09:01

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

TEMP-1138253-9E600E:

Created: 2026-05-30 Last update: 2026-05-30 09:01

2 open merge requests in Salsa normal

There are 2 open merge requests for this package on Salsa. You should consider reviewing and/or merging these merge requests.

Created: 2025-09-22 Last update: 2026-04-19 20:03

debian/patches: 1 patch to forward upstream low

Among the 5 debian patches available in version 0.9.15+dfsg-5 of the package, we noticed the following issues:

1 patch where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2026-04-20 Last update: 2026-05-30 08:31

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.4 instead of 4.7.2).

Created: 2025-12-23 Last update: 2026-05-30 01:32

testing migrations

excuses:
- Migration status for libvncserver (0.9.15+dfsg-4 to 0.9.15+dfsg-5): Waiting for test results or another package, or too young (no action required now - check later)
- Issues preventing migration:
- ∙ ∙ Autopkgtest for libvncserver/0.9.15+dfsg-5: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Pass, riscv64: Test triggered, s390x: Pass
- ∙ ∙ Autopkgtest for vlc/3.0.23-3: amd64: Pass, arm64: Pass, i386: Pass, ppc64el: Pass, riscv64: Test triggered, s390x: Pass
- ∙ ∙ Too young, only 1 of 5 days old
- Additional info (not blocking):
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/libv/libvncserver.html
- ∙ ∙ Reproduced on amd64 - info
- ∙ ∙ Reproduced on arm64 - info
- ∙ ∙ Reproduced on armhf - info
- ∙ ∙ Reproduced on i386 - info
- Not considered

news

[2026-05-29] Accepted libvncserver 0.9.15+dfsg-5 (source) into unstable (Sven Geuer)
[2026-05-02] Accepted libvncserver 0.9.14+dfsg-1+deb12u1 (source) into oldstable-proposed-updates (Debian FTP Masters) (signed by: Sven Geuer)
[2026-04-22] libvncserver 0.9.15+dfsg-4 MIGRATED to testing (Debian testing watch)
[2026-04-19] Accepted libvncserver 0.9.15+dfsg-1+deb13u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Sven Geuer)
[2026-04-19] Accepted libvncserver 0.9.15+dfsg-4 (source) into unstable (Sven Geuer)
[2026-04-06] libvncserver 0.9.15+dfsg-3 MIGRATED to testing (Debian testing watch)
[2026-04-03] Accepted libvncserver 0.9.15+dfsg-3 (source) into unstable (Sven Geuer)
[2025-10-12] libvncserver 0.9.15+dfsg-2 MIGRATED to testing (Debian testing watch)
[2025-10-10] Accepted libvncserver 0.9.15+dfsg-2 (source) into unstable (Mike Gabriel)
[2025-04-12] libvncserver 0.9.15+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-04-10] Accepted libvncserver 0.9.15+dfsg-1 (source) into unstable (Mike Gabriel)
[2023-02-09] libvncserver 0.9.14+dfsg-1 MIGRATED to testing (Debian testing watch)
[2023-02-06] Accepted libvncserver 0.9.14+dfsg-1 (source) into unstable (Mike Gabriel)
[2022-11-26] Accepted libvncserver 0.9.13+dfsg-2+deb11u1 (source) into proposed-updates (Debian FTP Masters) (signed by: Mike Gabriel)
[2022-11-22] libvncserver 0.9.13+dfsg-5 MIGRATED to testing (Debian testing watch)
[2022-11-20] Accepted libvncserver 0.9.13+dfsg-5 (source) into unstable (Mike Gabriel)
[2022-09-29] Accepted libvncserver 0.9.11+dfsg-1.3+deb10u5 (source) into oldstable (Thorsten Alteholz)
[2022-06-06] libvncserver 0.9.13+dfsg-4 MIGRATED to testing (Debian testing watch)
[2022-06-03] Accepted libvncserver 0.9.13+dfsg-4 (source) into unstable (Mike Gabriel)
[2021-08-16] libvncserver 0.9.13+dfsg-3 MIGRATED to testing (Debian testing watch)
[2021-04-29] Accepted libvncserver 0.9.13+dfsg-3 (source) into unstable (Mike Gabriel)
[2021-03-10] libvncserver 0.9.13+dfsg-2 MIGRATED to testing (Debian testing watch)
[2021-02-28] Accepted libvncserver 0.9.13+dfsg-2 (source) into unstable (Mike Gabriel)
[2020-11-15] Accepted libvncserver 0.9.11+dfsg-1.3~deb9u6 (source amd64) into oldstable (Thorsten Alteholz)
[2020-09-19] Accepted libvncserver 0.9.11+dfsg-1.3+deb10u4 (source) into proposed-updates->stable-new, proposed-updates (Debian FTP Masters) (signed by: Mike Gabriel)
[2020-08-28] Accepted libvncserver 0.9.11+dfsg-1.3~deb9u5 (source amd64) into oldstable (Mike Gabriel)
[2020-07-02] libvncserver 0.9.13+dfsg-1 MIGRATED to testing (Debian testing watch)
[2020-06-30] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u8 (source amd64) into oldoldstable (Mike Gabriel)
[2020-06-29] Accepted libvncserver 0.9.13+dfsg-1 (source) into unstable (Mike Gabriel)
[2020-04-09] Accepted libvncserver 0.9.11+dfsg-1.3~deb9u4 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Debian FTP Masters) (signed by: Utkarsh Gupta)

1
2

bugs [bug history graph]

all: 2
RC: 0
I&N: 2
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs, reproducibility, cross
popcon
browse source code
other distros
security tracker
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.9.15+dfsg-3
3 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing