Accepted ssvnc 1.0.29-3+deb9u1 (source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 31 May 2020 20:59:43 +0200
Source: ssvnc
Architecture: source
Version: 1.0.29-3+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Magnus Holmgren <holmgren@debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 945827
Changes:
ssvnc (1.0.29-3+deb9u1) stretch; urgency=medium
.
* Non-maintainer upload by the LTS team.
* Porting of libvncclient security patches (Closes: #945827):
- CVE-2018-20020: heap out-of-bound write vulnerability inside structure
in VNC client code.
- CVE-2018-20021: CWE-835: Infinite loop vulnerability in VNC client code.
- CVE-2018-20022: CWE-665: Improper Initialization vulnerability.
- CVE-2018-20024: null pointer dereference that can result DoS.
Checksums-Sha1:
55558f3f57693db3c45eacacf09cf1fc60d6ee4c 1946 ssvnc_1.0.29-3+deb9u1.dsc
3236fab26e43561625c1d9fa81a212a1d9975d9c 13196 ssvnc_1.0.29-3+deb9u1.debian.tar.xz
13a59471b473e70de2a01c67b4b5d69a7ddb017c 9993 ssvnc_1.0.29-3+deb9u1_source.buildinfo
Checksums-Sha256:
98d7f88760053e50dc9fa338bfd6ddf8319a2c02b22f123dd0c5dcfec08a5e99 1946 ssvnc_1.0.29-3+deb9u1.dsc
cd259bc9f99d3ee0747f9dd74a5176a1322083b8f724d08da54ce9724698fb14 13196 ssvnc_1.0.29-3+deb9u1.debian.tar.xz
4c6e3e9a298d5712b17dc8a1f52848848344f86b4354cb16e3fdbe970ee350ce 9993 ssvnc_1.0.29-3+deb9u1_source.buildinfo
Files:
c461cf0cec91ca18789002b0e919ddea 1946 net extra ssvnc_1.0.29-3+deb9u1.dsc
3dd3bf4f063ede8127c660489b1e9c7b 13196 net extra ssvnc_1.0.29-3+deb9u1.debian.tar.xz
859520c6bf556a00f5a9cef43c2b790e 9993 net extra ssvnc_1.0.29-3+deb9u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=pe98
-----END PGP SIGNATURE-----
Reply to: