[CLSA-2026:1789783613] Fix CVE(s): CVE-2026-32853, CVE-2026-32854

Type:

security

Severity:

Important

Release date:

2026-09-19 08:57:30 UTC

Description:

   * SECURITY UPDATE: Heap out-of-bounds read in UltraZip subrect parsing
     - debian/patches/CVE-2026-32853.patch: bound the subrect cursor to the
       decompressed data in HandleUltraZipBPP() (libvncclient/ultra.c)
     - CVE-2026-32853
   * SECURITY UPDATE: NULL pointer dereference in httpd proxy handlers
     - debian/patches/CVE-2026-32854.patch: NULL-check the strchr() results in
       httpProcessInput() (libvncserver/httpd.c)
     - CVE-2026-32854

CVEs fixed:

Updated packages:

libvncclient1_0.9.11+dfsg-1ubuntu1.4+tuxcare.els1_amd64.deb
sha:6716ab756e889da5943fe9bc9629ec8cfbb505a2
libvncserver-config_0.9.11+dfsg-1ubuntu1.4+tuxcare.els1_amd64.deb
sha:d29840180351e141ca3ed8c82e5d34e912cff852
libvncserver-dev_0.9.11+dfsg-1ubuntu1.4+tuxcare.els1_amd64.deb
sha:0634096aa1833809ed1c767652dd79eb6c5157c3
libvncserver1_0.9.11+dfsg-1ubuntu1.4+tuxcare.els1_amd64.deb
sha:fecf7f084d9a276acb70222a5d2dbd55eaaa3ef3

Notes:

This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.