[Pkg-tigervnc-devel] [Git][debian-remote-team/tigervnc][master] 3 commits: CVE-2026-34352: Prevent other users reading x0vncserver screen (Closes: #1132166)

[Joachim Falk (@jfalk-guest)]

Joachim Falk pushed to branch master at Debian Remote Packaging Team / tigervnc


Commits:
73748b14 by Joachim Falk at 2026-10-08T19:15:49+02:00
CVE-2026-34352: Prevent other users reading x0vncserver screen (Closes: #1132166)

- - - - -
0cc06866 by Joachim Falk at 2026-10-08T19:18:19+02:00
Workaround FTBFS with libtool 2.6.2. (Closes: #1146304)

- - - - -
e49010b7 by Joachim Falk at 2026-10-08T19:19:36+02:00
Merge remote-tracking branch 'remotes/origin/upstream'

- - - - -


99 changed files:

- .gitignore
- + debian/.gitignore
- + debian/README.source
- + debian/autoreconf
- + debian/changelog
- + debian/control
- + debian/copyright
- + debian/gbp.conf
- + debian/helpers/etc/X11/Xtigervnc-session
- + debian/helpers/etc/pam.d/tigervnc
- + debian/helpers/etc/tigervnc/openssl-ecparams.pem
- + debian/helpers/etc/tigervnc/openssl.cnf
- + debian/helpers/etc/tigervnc/vncserver-config-defaults
- + debian/helpers/etc/tigervnc/vncserver-config-mandatory
- + debian/helpers/usr/bin/tigervncserver
- + debian/helpers/usr/bin/x0tigervncserver
- + debian/helpers/usr/share/doc/tigervnc-xorg-extension/99-tigervnc.conf
- + debian/helpers/usr/share/man/man1/tigervncserver.1
- + debian/helpers/usr/share/man/man1/x0tigervncserver.1
- + debian/helpers/usr/share/man/man5/tigervnc.conf.5x
- + debian/helpers/usr/share/man/man5/vncserver-config-defaults.5x
- + debian/helpers/usr/share/man/man5/vncserver-config-mandatory.5x
- + debian/helpers/usr/share/perl5/TigerVNC/Common.pm
- + debian/helpers/usr/share/perl5/TigerVNC/Config.pm
- + debian/helpers/usr/share/perl5/TigerVNC/OptionTie.pm
- + debian/helpers/usr/share/perl5/TigerVNC/Wrapper.pm
- + debian/not-installed
- + debian/patches/0001-Prevent-other-users-reading-x0vncserver-screen.patch
- + debian/patches/0001-x0vncserver-build-make-missing-libraries-fatal-errors.patch
- + debian/patches/0020-buildtime-from-debian-changelog.patch
- + debian/patches/0030-fix-inetd-mode.patch
- + debian/patches/0175-xtigervncviewer-WM_CLASS.patch
- + debian/patches/0205-defined-CMAKE_INSTALL_FULL_BINDIR.patch
- + debian/patches/0210-use-tigervncsession-name.patch
- + debian/patches/0230-cache-PasswordFile.patch
- + debian/patches/CVE-2014-8240-849479.patch
- + debian/patches/dustbin/0000-find-fltk-libs.patch
- + debian/patches/dustbin/0002-fix-linking.patch
- + debian/patches/dustbin/0300-xorg-0121.patch
- + debian/patches/dustbin/backport/0001-Fix-formatting-of-rfbport-in-man-pages.patch
- + debian/patches/dustbin/backport/0002-Fix-typo-in-mirror-monitor-detection.patch
- + debian/patches/dustbin/backport/0003-Fix-handling-of-VMware-cursors.patch
- + debian/patches/dustbin/backport/0004-Fix-session-resize-after-mirroring-on-Linux-vncviewe.patch
- + debian/patches/dustbin/backport/0005-Added-AppStream-meta-info-file-for-the-vncviewer.patch
- + debian/patches/dustbin/backport/0010-fix-xtigervnc-build.patch
- + debian/patches/dustbin/backport/0102-fix-option-dashes-in-manpages-to-shutup-lintian.patch
- + debian/patches/dustbin/backport/0151-make-cmake-enable-options-mandatory-if-turned-on.patch
- + debian/patches/dustbin/backport/0220-remove-systemd-service-obsolete-syslog-target.patch
- + debian/patches/dustbin/backport/0225-add-missing-fields-to-vncviewer-metainfo.patch
- + debian/patches/rework/0200-add-tcpwrappers-support.patch
- + debian/patches/rh/0904-Added-RH-patch-tigervnc11-rh588342.patch-which-fixes.patch
- + debian/patches/rh/dustbin/0001-rpath-hack.patch
- + debian/patches/rh/dustbin/tigervnc-1.3.1-CVE-2014-8240.patch
- + debian/patches/rh/dustbin/tigervnc-1.3.1-do-not-die-when-port-is-already-taken.patch
- + debian/patches/rh/dustbin/tigervnc-cursor.patch
- + debian/patches/rh/dustbin/tigervnc-manpages.patch
- + debian/patches/rh/dustbin/tigervnc-shebang.patch
- + debian/patches/rh/dustbin/tigervnc-working-tls-on-fips-systems.patch
- + debian/patches/rh/dustbin/tigervnc-xserver119.patch
- + debian/patches/rh/dustbin/tigervnc-xstartup.patch
- + debian/patches/series
- + debian/rules
- + debian/source/format
- + debian/source/include-binaries
- + debian/source/options
- + debian/tigervnc-common.docs
- + debian/tigervnc-common.install
- + debian/tigervnc-common.manpages
- + debian/tigervnc-common.postinst
- + debian/tigervnc-common.preinst
- + debian/tigervnc-common.prerm
- + debian/tigervnc-connection-linux.jpg
- + debian/tigervnc-connection-macos.jpg
- + debian/tigervnc-connection-windows.jpg
- + debian/tigervnc-scraping-server.install
- + debian/tigervnc-scraping-server.manpages
- + debian/tigervnc-scraping-server.postinst
- + debian/tigervnc-scraping-server.prerm
- + debian/tigervnc-standalone-server.install
- + debian/tigervnc-standalone-server.maintscript
- + debian/tigervnc-standalone-server.manpages
- + debian/tigervnc-standalone-server.postinst
- + debian/tigervnc-standalone-server.postrm
- + debian/tigervnc-standalone-server.preinst
- + debian/tigervnc-standalone-server.prerm
- + debian/tigervnc-tools.install
- + debian/tigervnc-tools.manpages
- + debian/tigervnc-tools.postinst
- + debian/tigervnc-tools.prerm
- + debian/tigervnc-viewer.install
- + debian/tigervnc-viewer.manpages
- + debian/tigervnc-viewer.postinst
- + debian/tigervnc-viewer.prerm
- + debian/tigervnc-xorg-extension.docs
- + debian/tigervnc-xorg-extension.install
- + debian/tigervnc_16.png
- + debian/upstream/metadata
- + debian/watch
- + debian/xserver121.patch


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/debian-remote-team/tigervnc/-/compare/fbfc0f96c0a148838c1cf8f499fc5897fc45eaf6...e49010b74ae398ba610f817a6e7b822513e3dbfe

-- 
View it on GitLab: https://salsa.debian.org/debian-remote-team/tigervnc/-/compare/fbfc0f96c0a148838c1cf8f499fc5897fc45eaf6...e49010b74ae398ba610f817a6e7b822513e3dbfe
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-tigervnc-devel/attachments/20261008/52e35b5e/attachment-0001.htm>