libvncserver (0.9.13+dfsg-1) [PTS] [DDPO]

OK: VCS matches the version in the archive

Git: https://salsa.debian.org/debian-remote-team/libvncserver.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Browser: https://salsa.debian.org/debian-remote-team/libvncserver/
Last scan: 2020-06-30 10:17:18+00
Next scan: 2020-07-07 04:50:00+00
CI pipeline status: failed

Debian changelog in Git:

libvncserver (0.9.13+dfsg-1) unstable; urgency=medium

  * New upstream release:
    - CVE-2018-21247: When connecting to a repeater, only send initialised
      string
    - CVE-2019-20839: libvncclient: bail out if unix socket name would overflow
    - CVE-2019-20840: fix crash because of unaligned accesses in
      hybiReadAndDecode()
    - CVE-2020-14396: libvncclient/tls_openssl: do not deref a NULL pointer
    - CVE-2020-14397: libvncserver: add missing NULL pointer checks
    - CVE-2020-14398: libvncclient: handle half-open TCP connections
    - CVE-2020-14399: libvncclient: fix pointer aliasing/alignment issue
    - CVE-2020-14400: libvncserver: fix pointer aliasing/alignment issue
    - CVE-2020-14401: libvncserver: scale: cast to 64 bit before shifting
    - CVE-2020-14402: libvncserver: encodings: prevent OOB accesses
    - CVE-2020-14403: encodings: prevent OOB accesses
    - CVE-2020-14404: libvncserver: encodings: prevent OOB accesses
    - CVE-2020-14405: libvncclient/rfbproto: limit max textchat size
  * debian/patches:
    + Drop all patches. All applied upstream.
    + Add README file explaining on our patch naming scheme.
  * debian/*.symbols:
    + Update symbols.
  * debian/control:
    + Bump DH compat level to version 13.

 -- Mike Gabriel <sunweaver@debian.org>  Mon, 29 Jun 2020 14:44:43 +0200

This branch is even with tag debian/0.9.13+dfsg-1