WebSVN - Diff - Rev 56 and 57 - /ssvnc/trunk/debian/changelog


ssvnc (1.0.29-5) unstable; urgency=high

  * Porting of libvncclient security patches by the jessie LTS team
    (Closes: #945827):
    - CVE-2018-20020: heap out-of-bound write vulnerability inside structure
      in VNC client code.
    - CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code.
    - CVE-2018-20022: CWE-665: Improper Initialization vulnerability.
    - CVE-2018-20024: null pointer dereference that can result DoS.
  * Bump Standards-Version to 4.4.1.

 -- Magnus Holmgren <holmgren@debian.org>  Mon, 16 Dec 2019 19:46:31 +0100

ssvnc (1.0.29-4) unstable; urgency=low

  * default-jdk-headless is enough to build.
  * Compile java with -source 1.7 -target 1.7 (Closes: #874004).
  * Replace priority extra with optional.
  * Switch to Debhelper compat level 10.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 24 Jun 2018 19:39:53 +0200

ssvnc (1.0.29-3) unstable; urgency=low

  * debian/rules: Add call to dh_strip_nondeterminism.
  * openssl1.1.patch (new): Support OpenSSL 1.1 API changes (Closes:
    #828559).
  * auto-scale.patch (new): Make autoscaling work (Closes: #801804, LP:
    #1312966). In addition to the command-line option "-scale auto"
    creating a 1×1 window, rescaling when resizing the window didn't
    happen, at least not when Caps Lock or other modifiers were active.
  * samemachine_ipv6_overflow.patch (new): Fix stack overflow when
    connecting over IPv6, caused by non-IPv6-aware code (Closes: #774622).
  * nostrip.patch: Don't strip vncstorepw or ultravnc_dsm_helper either.
  * buildflags.patch: Also pass flags to vncstorepw/Makefile and patch
    that to use them.
  * Bump Standards-Version to 3.9.8.

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 30 Jul 2016 23:09:44 +0200

ssvnc (1.0.29-2) unstable; urgency=low

  * Also get CPPFLAGS from dpkg-buildflags. Pass it as EXTRA_DEFINES to
    vnc_unixsrc/*/Makefile.

 -- Magnus Holmgren <holmgren@debian.org>  Fri, 11 Nov 2011 08:11:09 +0100

ssvnc (1.0.29-1) unstable; urgency=low

  * New upstream release.
  * Install ReleaseNotes as upstream changelog file.
  * Simply build-depend on libjpeg-dev instead of libjpeg62-dev |
    libjpeg-dev (Closes: #644808).
  * Install a symlink in /usr/bin instead of including the main vncviewer
    binary twice in the package.
  * Add build-arch and build-indep targets to debian/rules.
  * nostrip.patch: Remove strip command from the Makefile, allowing
    DEB_BUILD_OPTONS=nostrip to work.
  * Get CFLAGS and LDFLAGS from dpkg-buildflags.
  * buildflags.patch: Pass CFLAGS and LDFLAGS through via ./Makefile as
    CDEBUGFLAGS and LOCAL_LDFLAGS to vnc_unixsrc/*/Makefile. This results
    in -fno-strict-aliasing (added by xmkmf by default) being dropped, but
    that doesn't seem to cause any problems.
  * format-security.patch: Fix some flaws uncovered by -Wformat-security.
  * Bump Standards-Version to 3.9.2.

 -- Magnus Holmgren <holmgren@debian.org>  Thu, 10 Nov 2011 22:23:15 +0100

ssvnc (1.0.28-1) unstable; urgency=low

  * New upstream release (Closes: #592873, "Connection from UVNC
    Single-Click does not start vncviewer when -acceptpopups is set").
  * Convert to source format 3.0 (quilt), changing /bin/sh into /bin/bash
    (see below) in the install target instead.
  * debian/copyright: Update years of copyright; remove notice that the
    UltraVNC DSM helper module is not included (which it is since
    1.0.24-1).
  * Remove redundant bash dependency; bash isn't going to be non-essential
    any time soon.
  * Up Standards-Version to 3.9.1.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 06 Feb 2011 23:06:25 +0100

ssvnc (1.0.27-1) unstable; urgency=low

  * New upstream release.
  * bashisms.dpatch: Don't try to fix all bashisms; instead change /bin/sh
    to /bin/bash and depend on bash, which is small in this context.

 -- Magnus Holmgren <holmgren@debian.org>  Sun, 23 May 2010 19:07:52 +0200

ssvnc (1.0.25-1) unstable; urgency=low

  * New upstream release.
  * confusing_-h.dpatch and bashisms.dpatch: adjusted.

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 06 Feb 2010 20:45:04 +0100

ssvnc (1.0.24-1) unstable; urgency=low

  * New upstream release.
    * ssvnc -help now prints a help message instead of passing -help to the
      tcl interpreter.
  * confusing_-h.dpatch (new): Improve upstream's handling of -help a bit
    (Closes: 544250).
  * ultraftp_path.dpach (new): Use hardcoded (and correct for this
    package) path to ultraftp.jar if SSVNC_ULTRA_FTP_JAR is unset, so that
    file transfers work even if ssvncviewer is executed directly.
  * bashisms.dpatch (new): Fix most bashisms (all that matter).
  * Drop no_openssl.dpatch and build ultravnc_dsm_helper; OpenSSL
    exception has been granted. Build-depend on libssl-dev.
  * Promote stunnel4 from Recommends to Depends (Closes: #553411), depend
    directly on openssl, depend on tk instead of tk8.4, and tweak java
    recommendations.
  * Add README.source.
  * Bump Standards-Version to 3.8.3.

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 31 Oct 2009 21:02:42 +0100

ssvnc (1.0.23-1) unstable; urgency=low

  * Initial release (Closes: #504134).

 -- Magnus Holmgren <holmgren@debian.org>  Sat, 01 Aug 2009 19:31:25 +0200

Subversion Repositories

(root)/ssvnc/trunk/debian/changelog @ 43 - Rev 56 → 57

Rev 56		Rev 57
1	ssvnc (1.0.29-5) unstable; urgency=high	1	ssvnc (1.0.29-5) unstable; urgency=high
2		2
3	* Porting of libvncclient security patches by the jessie LTS team	3	* Porting of libvncclient security patches by the jessie LTS team
4	(Closes: #945827):	4	(Closes: #945827):
5	- CVE-2018-20020: heap out-of-bound write vulnerability inside structure	5	- CVE-2018-20020: heap out-of-bound write vulnerability inside structure
6	in VNC client code.	6	in VNC client code.
7	- CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code.	7	- CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code.
8	- CVE-2018-20022: CWE-665: Improper Initialization vulnerability.	8	- CVE-2018-20022: CWE-665: Improper Initialization vulnerability.
9	- CVE-2018-20024: null pointer dereference that can result DoS.	9	- CVE-2018-20024: null pointer dereference that can result DoS.
-		10	* Bump Standards-Version to 4.4.1.
10		11
11	-- Magnus Holmgren <holmgren@debian.org> Mon, 16 Dec 2019 19:07:55 +0100	12	-- Magnus Holmgren <holmgren@debian.org> Mon, 16 Dec 2019 19:46:31 +0100
12		13
13	ssvnc (1.0.29-4) unstable; urgency=low	14	ssvnc (1.0.29-4) unstable; urgency=low
14		15
15	* default-jdk-headless is enough to build.	16	* default-jdk-headless is enough to build.
16	* Compile java with -source 1.7 -target 1.7 (Closes: #874004).	17	* Compile java with -source 1.7 -target 1.7 (Closes: #874004).
17	* Replace priority extra with optional.	18	* Replace priority extra with optional.
18	* Switch to Debhelper compat level 10.	19	* Switch to Debhelper compat level 10.
19		20
20	-- Magnus Holmgren <holmgren@debian.org> Sun, 24 Jun 2018 19:39:53 +0200	21	-- Magnus Holmgren <holmgren@debian.org> Sun, 24 Jun 2018 19:39:53 +0200
21		22
22	ssvnc (1.0.29-3) unstable; urgency=low	23	ssvnc (1.0.29-3) unstable; urgency=low
23		24
24	* debian/rules: Add call to dh_strip_nondeterminism.	25	* debian/rules: Add call to dh_strip_nondeterminism.
25	* openssl1.1.patch (new): Support OpenSSL 1.1 API changes (Closes:	26	* openssl1.1.patch (new): Support OpenSSL 1.1 API changes (Closes:
26	#828559).	27	#828559).
27	* auto-scale.patch (new): Make autoscaling work (Closes: #801804, LP:	28	* auto-scale.patch (new): Make autoscaling work (Closes: #801804, LP:
28	#1312966). In addition to the command-line option "-scale auto"	29	#1312966). In addition to the command-line option "-scale auto"
29	creating a 1×1 window, rescaling when resizing the window didn't	30	creating a 1×1 window, rescaling when resizing the window didn't
30	happen, at least not when Caps Lock or other modifiers were active.	31	happen, at least not when Caps Lock or other modifiers were active.
31	* samemachine_ipv6_overflow.patch (new): Fix stack overflow when	32	* samemachine_ipv6_overflow.patch (new): Fix stack overflow when
32	connecting over IPv6, caused by non-IPv6-aware code (Closes: #774622).	33	connecting over IPv6, caused by non-IPv6-aware code (Closes: #774622).
33	* nostrip.patch: Don't strip vncstorepw or ultravnc_dsm_helper either.	34	* nostrip.patch: Don't strip vncstorepw or ultravnc_dsm_helper either.
34	* buildflags.patch: Also pass flags to vncstorepw/Makefile and patch	35	* buildflags.patch: Also pass flags to vncstorepw/Makefile and patch
35	that to use them.	36	that to use them.
36	* Bump Standards-Version to 3.9.8.	37	* Bump Standards-Version to 3.9.8.
37		38
38	-- Magnus Holmgren <holmgren@debian.org> Sat, 30 Jul 2016 23:09:44 +0200	39	-- Magnus Holmgren <holmgren@debian.org> Sat, 30 Jul 2016 23:09:44 +0200
39		40
40	ssvnc (1.0.29-2) unstable; urgency=low	41	ssvnc (1.0.29-2) unstable; urgency=low
41		42
42	* Also get CPPFLAGS from dpkg-buildflags. Pass it as EXTRA_DEFINES to	43	* Also get CPPFLAGS from dpkg-buildflags. Pass it as EXTRA_DEFINES to
43	vnc_unixsrc/*/Makefile.	44	vnc_unixsrc/*/Makefile.
44		45
45	-- Magnus Holmgren <holmgren@debian.org> Fri, 11 Nov 2011 08:11:09 +0100	46	-- Magnus Holmgren <holmgren@debian.org> Fri, 11 Nov 2011 08:11:09 +0100
46		47
47	ssvnc (1.0.29-1) unstable; urgency=low	48	ssvnc (1.0.29-1) unstable; urgency=low
48		49
49	* New upstream release.	50	* New upstream release.
50	* Install ReleaseNotes as upstream changelog file.	51	* Install ReleaseNotes as upstream changelog file.
51	* Simply build-depend on libjpeg-dev instead of libjpeg62-dev \|	52	* Simply build-depend on libjpeg-dev instead of libjpeg62-dev \|
52	libjpeg-dev (Closes: #644808).	53	libjpeg-dev (Closes: #644808).
53	* Install a symlink in /usr/bin instead of including the main vncviewer	54	* Install a symlink in /usr/bin instead of including the main vncviewer
54	binary twice in the package.	55	binary twice in the package.
55	* Add build-arch and build-indep targets to debian/rules.	56	* Add build-arch and build-indep targets to debian/rules.
56	* nostrip.patch: Remove strip command from the Makefile, allowing	57	* nostrip.patch: Remove strip command from the Makefile, allowing
57	DEB_BUILD_OPTONS=nostrip to work.	58	DEB_BUILD_OPTONS=nostrip to work.
58	* Get CFLAGS and LDFLAGS from dpkg-buildflags.	59	* Get CFLAGS and LDFLAGS from dpkg-buildflags.
59	* buildflags.patch: Pass CFLAGS and LDFLAGS through via ./Makefile as	60	* buildflags.patch: Pass CFLAGS and LDFLAGS through via ./Makefile as
60	CDEBUGFLAGS and LOCAL_LDFLAGS to vnc_unixsrc/*/Makefile. This results	61	CDEBUGFLAGS and LOCAL_LDFLAGS to vnc_unixsrc/*/Makefile. This results
61	in -fno-strict-aliasing (added by xmkmf by default) being dropped, but	62	in -fno-strict-aliasing (added by xmkmf by default) being dropped, but
62	that doesn't seem to cause any problems.	63	that doesn't seem to cause any problems.
63	* format-security.patch: Fix some flaws uncovered by -Wformat-security.	64	* format-security.patch: Fix some flaws uncovered by -Wformat-security.
64	* Bump Standards-Version to 3.9.2.	65	* Bump Standards-Version to 3.9.2.
65		66
66	-- Magnus Holmgren <holmgren@debian.org> Thu, 10 Nov 2011 22:23:15 +0100	67	-- Magnus Holmgren <holmgren@debian.org> Thu, 10 Nov 2011 22:23:15 +0100
67		68
68	ssvnc (1.0.28-1) unstable; urgency=low	69	ssvnc (1.0.28-1) unstable; urgency=low
69		70
70	* New upstream release (Closes: #592873, "Connection from UVNC	71	* New upstream release (Closes: #592873, "Connection from UVNC
71	Single-Click does not start vncviewer when -acceptpopups is set").	72	Single-Click does not start vncviewer when -acceptpopups is set").
72	* Convert to source format 3.0 (quilt), changing /bin/sh into /bin/bash	73	* Convert to source format 3.0 (quilt), changing /bin/sh into /bin/bash
73	(see below) in the install target instead.	74	(see below) in the install target instead.
74	* debian/copyright: Update years of copyright; remove notice that the	75	* debian/copyright: Update years of copyright; remove notice that the
75	UltraVNC DSM helper module is not included (which it is since	76	UltraVNC DSM helper module is not included (which it is since
76	1.0.24-1).	77	1.0.24-1).
77	* Remove redundant bash dependency; bash isn't going to be non-essential	78	* Remove redundant bash dependency; bash isn't going to be non-essential
78	any time soon.	79	any time soon.
79	* Up Standards-Version to 3.9.1.	80	* Up Standards-Version to 3.9.1.
80		81
81	-- Magnus Holmgren <holmgren@debian.org> Sun, 06 Feb 2011 23:06:25 +0100	82	-- Magnus Holmgren <holmgren@debian.org> Sun, 06 Feb 2011 23:06:25 +0100
82		83
83	ssvnc (1.0.27-1) unstable; urgency=low	84	ssvnc (1.0.27-1) unstable; urgency=low
84		85
85	* New upstream release.	86	* New upstream release.
86	* bashisms.dpatch: Don't try to fix all bashisms; instead change /bin/sh	87	* bashisms.dpatch: Don't try to fix all bashisms; instead change /bin/sh
87	to /bin/bash and depend on bash, which is small in this context.	88	to /bin/bash and depend on bash, which is small in this context.
88		89
89	-- Magnus Holmgren <holmgren@debian.org> Sun, 23 May 2010 19:07:52 +0200	90	-- Magnus Holmgren <holmgren@debian.org> Sun, 23 May 2010 19:07:52 +0200
90		91
91	ssvnc (1.0.25-1) unstable; urgency=low	92	ssvnc (1.0.25-1) unstable; urgency=low
92		93
93	* New upstream release.	94	* New upstream release.
94	* confusing_-h.dpatch and bashisms.dpatch: adjusted.	95	* confusing_-h.dpatch and bashisms.dpatch: adjusted.
95		96
96	-- Magnus Holmgren <holmgren@debian.org> Sat, 06 Feb 2010 20:45:04 +0100	97	-- Magnus Holmgren <holmgren@debian.org> Sat, 06 Feb 2010 20:45:04 +0100
97		98
98	ssvnc (1.0.24-1) unstable; urgency=low	99	ssvnc (1.0.24-1) unstable; urgency=low
99		100
100	* New upstream release.	101	* New upstream release.
101	* ssvnc -help now prints a help message instead of passing -help to the	102	* ssvnc -help now prints a help message instead of passing -help to the
102	tcl interpreter.	103	tcl interpreter.
103	* confusing_-h.dpatch (new): Improve upstream's handling of -help a bit	104	* confusing_-h.dpatch (new): Improve upstream's handling of -help a bit
104	(Closes: 544250).	105	(Closes: 544250).
105	* ultraftp_path.dpach (new): Use hardcoded (and correct for this	106	* ultraftp_path.dpach (new): Use hardcoded (and correct for this
106	package) path to ultraftp.jar if SSVNC_ULTRA_FTP_JAR is unset, so that	107	package) path to ultraftp.jar if SSVNC_ULTRA_FTP_JAR is unset, so that
107	file transfers work even if ssvncviewer is executed directly.	108	file transfers work even if ssvncviewer is executed directly.
108	* bashisms.dpatch (new): Fix most bashisms (all that matter).	109	* bashisms.dpatch (new): Fix most bashisms (all that matter).
109	* Drop no_openssl.dpatch and build ultravnc_dsm_helper; OpenSSL	110	* Drop no_openssl.dpatch and build ultravnc_dsm_helper; OpenSSL
110	exception has been granted. Build-depend on libssl-dev.	111	exception has been granted. Build-depend on libssl-dev.
111	* Promote stunnel4 from Recommends to Depends (Closes: #553411), depend	112	* Promote stunnel4 from Recommends to Depends (Closes: #553411), depend
112	directly on openssl, depend on tk instead of tk8.4, and tweak java	113	directly on openssl, depend on tk instead of tk8.4, and tweak java
113	recommendations.	114	recommendations.
114	* Add README.source.	115	* Add README.source.
115	* Bump Standards-Version to 3.8.3.	116	* Bump Standards-Version to 3.8.3.
116		117
117	-- Magnus Holmgren <holmgren@debian.org> Sat, 31 Oct 2009 21:02:42 +0100	118	-- Magnus Holmgren <holmgren@debian.org> Sat, 31 Oct 2009 21:02:42 +0100
118		119
119	ssvnc (1.0.23-1) unstable; urgency=low	120	ssvnc (1.0.23-1) unstable; urgency=low
120		121
121	* Initial release (Closes: #504134).	122	* Initial release (Closes: #504134).
122		123
123	-- Magnus Holmgren <holmgren@debian.org> Sat, 01 Aug 2009 19:31:25 +0200	124	-- Magnus Holmgren <holmgren@debian.org> Sat, 01 Aug 2009 19:31:25 +0200