lp:ubuntu/utopic-proposed/libvncserver

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

23. By Marc Deslauriers on 2014-09-25

* SECURITY UPDATE: denial of service and possible code execution via
  integer overflow and lack of malloc error handling in
  MallocFrameBuffer()
  - debian/patches/CVE-2014-6051-6052.patch: check size and handle
    return code in libvncclient/vncviewer.c, handle return code in
    libvncclient/rfbproto.c.
  - CVE-2014-6051
  - CVE-2014-6052
* SECURITY UPDATE: denial of service via large ClientCutText message
  - debian/patches/CVE-2014-6053.patch: check malloc result in
    libvncserver/rfbserver.c.
  - CVE-2014-6053
* SECURITY UPDATE: denial of service via zero scaling factor
  - debian/patches/CVE-2014-6054.patch: prevent zero scaling factor in
    libvncserver/rfbserver.c, check for integer overflow in
    libvncserver/scale.c.
  - CVE-2014-6054
* SECURITY UPDATE: denial of service and possible code execution via
  stack overflows in File Transfer feature
  - debian/patches/CVE-2014-6055.patch: check sizes in
    libvncserver/rfbserver.c.
  - CVE-2014-6055

22. By Luca Falavigna on 2014-08-12

[ Luca Falavigna ]
* debian/patches/pkgconfig.patch:
  - Use Libs.private to avoid unnecessary linkage (Closes: #747539).
* debian/tests/*:
  - Provide a simple test to check whether the package is functional
    as per DEP8 (autopkgtests).
* debian/control:
  - (Build-)depends on libgnutls28-dev and libgcrypt20-dev instead of
    libgnutls-dev and libgcrypt11-dev (Closes: #753126).
  - Point Homepage field to the new home page.
* debian/copyright:
  - Point Source field to the new download location.
* debian/watch:
  - Point to GitHub.

[ Gianfranco Costamagna ]
* Drop the libpng12-dev build conflict, relying instead on a better
  --without-png configure flag

[ Matthias Klose ]
* debian/patches/ppc64el.patch
  - Patch acinclude.m4 for ppc64el (Closes: #756809).

21. By Dimitri John Ledkov on 2014-08-08

No change rebuild against gnutls28.

20. By Gianfranco Costamagna on 2014-08-01

Drop the libpng12-dev build conflict, relying instead on a better
--without-png configure flag.

19. By Gianfranco Costamagna on 2014-07-28

* Merge from Debian unstable. (LP: #1349386) Remaining changes:
  - Patch acinclude.m4 for ppc64el.
  - Enable verbose build.

18. By Matthias Klose on 2013-12-22

* Patch acinclude.m4 for ppc64el.
* Fix build failure with -Wformat-security.
* Enable verbose build.

17. By Luca Falavigna on 2012-05-05

* New upstream release.
* Patches refreshed for the new upstream version.
* Multi-arch support (Closes: #664883).
* debian/patches/format_string.patch:
  - Use format string argument with fprintf.
* debian/patches/02_linux_test.patch:
  - Removed, applied upstream.
* debian/patches/04_rename_linuxvnc.patch:
  - Removed, applied upstream.
* debian/patches/05_GnuTLS.patch:
  - Removed, applied upstream.
* debian/compat:
  - Bump compatibility level to 9.
* debian/control:
  - Add libvncserver-config binary package, needed for Multi-arch.
  - Bump Standards-Version to 3.9.3.
* debian/copyright:
  - Convert to DEP5 format.
* debian/libvncserver-config.1:
  - Fix hyphen-used-as-minus-sign lintian warning.
* debian/rules:
  - Implement a get-orig-source target to get rid of webclients
    directory, which contains Java classes without sources.
* debian/watch:
  - Mangle "+dfsg" prefix from version number.

16. By Felix Geyer on 2012-01-07

* Merge from Debian testing, remaining changes:
  - Build with -O0 on ppc64 to work around a link failure.

15. By Felix Geyer on 2011-11-21

* Merge from Debian unstable, remaining changes:
  - Build with -O0 on ppc64 to work around a link failure.

14. By Felix Geyer on 2011-08-05

* Merge from Debian unstable, remaining changes:
  - Build with -O0 on ppc64 to work around a link failure.