Arch Linux

Hello,

It has been reported on oss-security [1] that multiple security issues were found in libvncserver <= 0.9.9, including remote code execution.

Resolution:

Please note that the project has been moved to https://libvnc.github.io/.

A lot of patches have been committed [2], probably too many to track them, but a new 0.9.10 version should be released soon (the NEWS file has already been updated) [3].

[1]: http://seclists.org/oss-sec/2014/q3/639
[2]: https://github.com/LibVNC/libvncserver/commit/045a044e8ae79db9244593fbce154cdf6e843273,
https://github.com/LibVNC/libvncserver/commit/85a778c0e45e87e35ee7199f1f25020648e8b812,
https://github.com/LibVNC/libvncserver/commit/ba710eb145bd2a9bb14bc316eb6ff645f004b06c,
https://github.com/LibVNC/libvncserver/commit/6037a9074d52b1963c97cb28ea1096c7c14cbf28,
https://github.com/LibVNC/libvncserver/commit/05a9bd41a8ec0a9d580a8f420f41718bdd235446,
https://github.com/LibVNC/libvncserver/commit/50dbe1df75d983cf7d69874383445fdff18de5a3,
https://github.com/LibVNC/libvncserver/commit/7e9ce73b5d4dd59079e03bd43ce1d2bcbb60caf3,
https://github.com/LibVNC/libvncserver/commit/c18fa98b1ffc651e6429a439b9c2ec4c0f833881,
https://github.com/LibVNC/libvncserver/commit/83bf1f59743ab6158f17bc1434dcf4e9cfc5aa2a,
https://github.com/LibVNC/libvncserver/commit/8220f4da4c4f42d8208f09346414f15121153da6,

[3]: https://github.com/LibVNC/libvncserver/commit/cdc5b5196c65fba7ad90caafc9c8090c72458c4c