Debian Package Tracker - libvncserver

general

source: libvncserver (main)
version: 0.9.11+dfsg-1.3
maintainer: Peter Spiess-Knafl (DMD)
arch: any
std-ver: 3.9.8
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.9.9+dfsg2-6.1+deb8u3
o-o-sec: 0.9.9+dfsg2-6.1+deb8u6
oldstable: 0.9.11+dfsg-1.3~deb9u1
old-sec: 0.9.11+dfsg-1.3~deb9u1
stable: 0.9.11+dfsg-1.3
testing: 0.9.11+dfsg-1.3
unstable: 0.9.11+dfsg-1.3
exp: 0.9.12+dfsg-2

versioned links

0.9.9+dfsg2-6.1+deb8u3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.9+dfsg2-6.1+deb8u6: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.11+dfsg-1.3~deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.11+dfsg-1.3: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.9.12+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libvncclient1
libvncclient1-dbg
libvncserver-config
libvncserver-dev
libvncserver1
libvncserver1-dbg

action needed

A new upstream version is available: 0.9.12 high

A new upstream version 0.9.12 is available, you should consider packaging it.

Created: 2019-01-10 Last update: 2019-12-10 07:12

Failed to analyze the VCS repository. Please troubleshoot and fix the issue. high

vcswatch reports that there is an error with this package's VCS, or the debian/changelog file inside it. Please check the error shown below and try to fix it. You might have to update the VCS URL in the debian/control file to point to the correct repository.

fatal: could not read Username for 'https://salsa.debian.org': No such device or address

Created: 2018-05-31 Last update: 2019-12-06 00:46

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2019-15681: LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.

Please fix it.

Created: 2019-10-30 Last update: 2019-12-01 20:57

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2019-15681: LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.

Please fix it.

Created: 2019-10-30 Last update: 2019-12-01 20:57

lintian reports 2 errors and 15 warnings high

Lintian reports 2 errors and 15 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2019-08-28 Last update: 2019-10-21 02:10

Standards version of the package is outdated. high

The package is severely out of date with respect to the Debian Policy. The package should be updated to follow the last version of Debian Policy (Standards-Version 4.4.1 instead of 3.9.8).

Created: 2018-03-31 Last update: 2019-09-29 23:40

The URL(s) for this package had some recent persistent issues low

DUCK reports some issues concerning upstream URLs defined for this package.

Created: 2019-01-12 Last update: 2019-12-10 12:05

1 ignored security issue in buster low

There is 1 open security issue in buster.

1 issue skipped by the security teams:

CVE-2019-15681: LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.

Please fix it.

Created: 2019-10-30 Last update: 2019-12-01 20:57

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2019-15681: LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused for information disclosure. Combined with another vulnerability, it can be used to leak stack memory and bypass ASLR. This attack appear to be exploitable via network connectivity. These vulnerabilities have been fixed in commit d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a.

Please fix it.

Created: 2019-10-30 Last update: 2019-12-01 20:57

news

[rss feed]

[2019-11-29] Accepted libvncserver 0.9.12+dfsg-2 (source) into experimental (Mike Gabriel)
[2019-11-28] Accepted libvncserver 0.9.12+dfsg-1 (source) into experimental (Mike Gabriel)
[2019-10-30] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u6 (source amd64) into oldoldstable (Mike Gabriel)
[2019-02-04] Accepted libvncserver 0.9.11+dfsg-1.3~deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Salvatore Bonaccorso)
[2019-02-04] libvncserver 0.9.11+dfsg-1.3 MIGRATED to testing (Debian testing watch)
[2019-02-03] Accepted libvncserver 0.9.11+dfsg-1.3~deb9u1 (source) into stable->embargoed, stable (Salvatore Bonaccorso)
[2019-01-31] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u5 (source amd64) into oldstable (Emilio Pozuelo Monfort)
[2019-01-30] Accepted libvncserver 0.9.11+dfsg-1.3 (source) into unstable (Salvatore Bonaccorso)
[2019-01-17] libvncserver 0.9.11+dfsg-1.2 MIGRATED to testing (Debian testing watch)
[2019-01-14] Accepted libvncserver 0.9.11+dfsg-1.2 (source) into unstable (Salvatore Bonaccorso)
[2018-12-25] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u4 (source amd64) into oldstable (Abhijith PA)
[2018-06-12] Accepted libvncserver 0.9.11+dfsg-1+deb9u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Markus Koschany)
[2018-06-12] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u3 (source amd64) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates (Markus Koschany)
[2018-06-12] libvncserver 0.9.11+dfsg-1.1 MIGRATED to testing (Debian testing watch)
[2018-06-09] Accepted libvncserver 0.9.11+dfsg-1.1 (source) into unstable (Markus Koschany)
[2018-06-08] Accepted libvncserver 0.9.11+dfsg-1+deb9u1 (source amd64) into stable->embargoed, stable (Markus Koschany)
[2018-06-08] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u3 (source amd64) into oldstable->embargoed, oldstable (Markus Koschany)
[2018-03-30] Accepted libvncserver 0.9.9+dfsg-1+deb7u3 (source amd64) into oldoldstable (Abhijith PA) (signed by: Ola Lundqvist)
[2018-03-30] Accepted libvncserver 0.9.9+dfsg-1+deb7u3 (source amd64) into oldoldstable (Abhijith PA) (signed by: Ola Lundqvist)
[2017-01-07] libvncserver 0.9.11+dfsg-1 MIGRATED to testing (Debian testing watch)
[2017-01-06] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u2 (source amd64) into proposed-updates->stable-new, proposed-updates (Peter Spiess-Knafl) (signed by: Sebastien Delafond)
[2017-01-04] Accepted libvncserver 0.9.11+dfsg-1 (source amd64) into unstable (Peter Spiess-Knafl)
[2017-01-03] Accepted libvncserver 0.9.9+dfsg-1+deb7u2 (source amd64) into oldstable (Chris Lamb)
[2016-01-04] Accepted libvncserver 0.9.7-2+deb6u2 (source amd64) into squeeze-lts (Mike Gabriel)
[2015-06-17] libvncserver 0.9.10+dfsg-3 MIGRATED to testing (Britney)
[2015-06-11] Accepted libvncserver 0.9.10+dfsg-3 (source amd64) into unstable (Peter Spiess-Knafl)
[2015-06-01] libvncserver 0.9.10+dfsg-2 MIGRATED to testing (Britney)
[2015-05-27] Accepted libvncserver 0.9.9+dfsg2-6.1+deb8u1 (source amd64) into proposed-updates->stable-new, proposed-updates (Peter Spiess-Knafl)
[2015-05-25] Accepted libvncserver 0.9.10+dfsg-2 (source amd64) into unstable (Peter Spiess-Knafl)
[2015-04-14] Accepted libvncserver 0.9.7-2+deb6u1 (source amd64) into squeeze-lts (Nguyen Cong) (signed by: Raphaël Hertzog)

bugs [bug history graph]

all: 0

links

homepage
lintian (2, 15)
buildd: logs, exp, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.9.11+dfsg-1.3
3 bugs