/ssvnc/trunk/debian/changelog |
---|
1,15 → 1,3 |
ssvnc (1.0.29-5) unstable; urgency=high |
* Porting of libvncclient security patches by the jessie LTS team |
(Closes: #945827): |
- CVE-2018-20020: heap out-of-bound write vulnerability inside structure |
in VNC client code. |
- CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code. |
- CVE-2018-20022: CWE-665: Improper Initialization vulnerability. |
- CVE-2018-20024: null pointer dereference that can result DoS. |
-- Magnus Holmgren <holmgren@debian.org> Mon, 16 Dec 2019 19:07:55 +0100 |
ssvnc (1.0.29-4) unstable; urgency=low |
* default-jdk-headless is enough to build. |
/ssvnc/trunk/debian/control |
---|
6,7 → 6,7 |
libxmu-dev, libxext-dev, libxt-dev, libsm-dev, libice-dev, |
libjpeg-dev, zlib1g-dev | libz-dev, |
default-jdk-headless, libssl-dev, dh-strip-nondeterminism |
Standards-Version: 4.1.4 |
Standards-Version: 3.9.8 |
Homepage: http://www.karlrunge.com/x11vnc/ssvnc.html |
Package: ssvnc |
/ssvnc/trunk/debian/patches/libvncclient_CVE-2018-20020.patch |
---|
File deleted |
/ssvnc/trunk/debian/patches/libvncclient_CVE-2018-20021.patch |
---|
File deleted |
/ssvnc/trunk/debian/patches/libvncclient_CVE-2018-20022.patch |
---|
File deleted |
/ssvnc/trunk/debian/patches/libvncclient_CVE-2018-20024.patch |
---|
File deleted |
/ssvnc/trunk/debian/patches/series |
---|
6,7 → 6,3 |
openssl1.1.patch |
auto-scale.patch |
samemachine_ip6_overflow.patch |
libvncclient_CVE-2018-20020.patch |
libvncclient_CVE-2018-20021.patch |
libvncclient_CVE-2018-20022.patch |
libvncclient_CVE-2018-20024.patch |