Changelog for tigervnc-1.10.1-13.1.i586.rpm :

* Mon Jun 07 2021 Jason Sikes - Enable GnuTLS to use Diffie-Hellman parameters from RFC7919 instead of generating our own.
* bsc#1179809
* tigervnc-FIPS-use-RFC7919.patch
* DH parameter generation was depricated in GnuTLS 3.6.0.
* Mon May 03 2021 Dominique Leuenberger - Do not carry two variants of the same servcice file, but rather bring a template which we dynamically adjust during installation to cater for the correct libexecdir value. + Replace xvnc-novnc-libexec.service and xvnc-novnc-lib.service with xvnc-novnc.service.in.
* Mon May 03 2021 Stefan Dirsch - package both xvnc-novnc-libexec.service and xvnc-novnc-lib.service source files
* Tue Apr 27 2021 Scott Bradnick - Adjusting suse_version check from \'> 1500\' to \'>= 1550\' per request.
* Fri Apr 23 2021 Scott Bradnick - Adding if statement to control libexec (Tumbleweed +) vs lib based \'Source#\' file for \'xvnc-novnc.service\'.
* Thu Apr 22 2021 Scott Bradnick - \'xvnc-novnc.service\' requires \'/usr/libexec/vnc/with-vnc-key.sh\' vs \'/usr/lib/vnc/with-vnc-key.sh\' for ExecStart to work correctly.
* Fri Mar 05 2021 Pedro Monreal - Use the system crypto-policies [bsc#1183082]- Add n_utilize-system-crypto-policies.patch
* Mon Dec 07 2020 Stefan Dirsch - x11vnc wrapper script: converted to python3 (boo#1179592)
* Wed Nov 25 2020 Stefan Dirsch - u_tigervnc_update_default_vncxstartup.patch
* check first for /usr/libexec/xinit/xinitrc, then /etc/X11/xinit/xinitrc (reported by aschnell AATTSUSE)
* Thu Nov 19 2020 Stefan Dirsch - xvncAATT.service: fixed path for %libexecdir (boo#1178601)
* Fri Sep 25 2020 Stefan Dirsch - CVE-2020-26117: Server certificates were stored as certiticate authoritied, allowing malicious owners of these certificates to impersonate any server after a client had added an exception (boo#1176733) U_0001-Properly-store-certificate-exceptions.patch, U_0002-Properly-store-certificate-exceptions-in-Java-viewer.patch- adjusted u_tigervnc-add-autoaccept-parameter.patch
* Wed Sep 16 2020 Stefan Dirsch - vnserver: fix startup of Plasma desktop (boo#1176571)
* Wed Aug 19 2020 Callum Farmer - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)- Spec file cleanups
* Wed Jul 01 2020 Stefan Dirsch - moved vnc snippet to /usr/share/X11/xorg.conf.d (boo#1173045)- package SLP sample config vnc.reg only as %doc (boo#1173045)- moved vnc pam config to /etc/usr/pam.d (boo#1173045)
* Mon Apr 13 2020 Lorenzo Paulatto - TigerVNC 1.10.1: Added libXdamage-devel and libXrandr-devel to the BuildRequisites, to build x0vncserver with DAMAGE, RANDR and XTEXT support
* Fri Apr 10 2020 Andreas Stieger - TigerVNC 1.10.1: Previously patched security fixes now in upstream release: CVE-2019-15691, bsc#1159856 CVE-2019-15692, bsc#1160250 CVE-2019-15693, bsc#1159858 CVE-2019-15694, bsc#1160251 CVE-2019-15695, bsc#1159860 dropping the following patches:
* 0001-Make-ZlibInStream-more-robust-against-failures.patch
* 0002-Encapsulate-PixelBuffer-internal-details.patch
* 0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch
* 0004-Add-write-protection-to-OffsetPixelBuffer.patch
* 0005-Handle-empty-Tight-gradient-rects.patch
* 0006-Add-unit-test-for-PixelFormat-sanity-checks.patch
* 0007-Fix-depth-sanity-test-in-PixelFormat.patch
* 0008-Add-sanity-checks-for-PixelFormat-shift-values.patch
* 0009-Remove-unused-FixedMemOutStream.patch
* 0010-Use-size_t-for-lengths-in-stream-objects.patch
* 0011-Be-defensive-about-overflows-in-stream-objects.patch
* 0012-Add-unit-tests-for-PixelFormat.is888-detection.patch
* 0013-Handle-pixel-formats-with-odd-shift-values.patch
* Sun Feb 23 2020 Hans-Peter Jansen - raise java dependency to 1.8.0 in order to compile the java part on older distributions
* Fri Feb 07 2020 Stefan Dirsch - added a reference to bsc#1162951 about the reasoning why adding the vnc user to the shadow group
* Wed Jan 15 2020 Stefan Dirsch - u_xorg-server-1.20.7-ddxInputThreadInit.patch
* buildfix for xorg-server 1.20.7, which moved ddxInputThread call from os layer into ddx layer
* Tue Jan 07 2020 Stefan Dirsch - TigerVNC security fix: 0001-Make-ZlibInStream-more-robust-against-failures.patch 0002-Encapsulate-PixelBuffer-internal-details.patch 0003-Restrict-PixelBuffer-dimensions-to-safe-values.patch 0004-Add-write-protection-to-OffsetPixelBuffer.patch 0005-Handle-empty-Tight-gradient-rects.patch 0006-Add-unit-test-for-PixelFormat-sanity-checks.patch 0007-Fix-depth-sanity-test-in-PixelFormat.patch 0008-Add-sanity-checks-for-PixelFormat-shift-values.patch 0009-Remove-unused-FixedMemOutStream.patch 0010-Use-size_t-for-lengths-in-stream-objects.patch 0011-Be-defensive-about-overflows-in-stream-objects.patch 0012-Add-unit-tests-for-PixelFormat.is888-detection.patch 0013-Handle-pixel-formats-with-odd-shift-values.patch
* stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder (CVE-2019-15691, bsc#1159856)
* improper value checks in CopyRectDecode may lead to heap buffer overflow (CVE-2019-15692, bsc#1160250)
* heap buffer overflow in TightDecoder::FilterGradient (CVE-2019-15693, bsc#1159858)
* improper error handling in processing MemOutStream may lead to heap buffer overflow (CVE-2019-15694, bsc#1160251
* stack buffer overflow, which could be triggered from CMsgReader::readSetCurso (CVE-2019-15695, bsc#1159860)
* Tue Dec 31 2019 Loic Devulder - Add tigervnc-fix-saving-of-bad-server-certs.patch
* fix saving of bad server certificates (boo#1159948)
* Tue Dec 03 2019 Marius Kittler - tigervnc-1.10.0
* The clipboard now supports full Unicode in the native viewer, WinVNC and Xvnc/libvnc.so
* The native client will now respect the system trust store when verifying server certificates
* Improved compatibility with VMware\'s VNC server
* Improved compatibility with some input methods on macOS
* Improvements to the automatic \"repair\" of JPEG artefacts
* Better handling of the Alt keys in some corner cases
* The Java web server has been removed as applets are no longer support by most browsers
* x0vncserver can now be configured to only allow local connections
* x0vncserver has received fixes for when only part of the display is shared
* Polling is now default in WinVNC as that works better for most
* Fri Oct 04 2019 Hans-Peter Jansen - tigervnc-1.9.0-201-e71a426
* implements extended clipboard handling (now utf-8 based)
* fixes a couple of small glitches
* Sat Apr 20 2019 Stefan Dirsch - tigervnc-1.9.0-199-005db35
* update to current git master in order to fix boo#1132901
* Tue Mar 26 2019 Yifan Jiang - Update with-vnc-key.sh to use only hostname for CN. The gnutls introduces gnutls_x509_crt_check_hostname2 in gnutls/lib/x509/hostname-verify.c#L159 to check if the given certificate\'s subject matches the given hostname. The function is used by the recent version of libvncclient which will fail to verify the certification if there is a mismatching between the connected hostname and the cert issuer\'s common name. https://github.com/LibVNC/libvncserver/commit/cc69ee9 So the previous way to generate the vnc server\'s cert brings a complicated CN, making the client using libvncclient (e.g. vinagre, remmina) hard to adapt the hostname check. It is better to populate the hostname as the common name without extra strings.
* Thu Mar 21 2019 Dominique Leuenberger - Change Requires(post): firewall-macros to BuildRequires: the macros are expanded at build time and not needed at all at runtime.
* Thu Feb 07 2019 Stephan Kulow - Fix build with latest cmake - which now requires the source directory as argument (still works with old cmake versions)
* Thu Jan 17 2019 msrbAATTsuse.com- Switch websocket dependency to python3. (bsc#1119737)
* Thu Jan 17 2019 msrbAATTsuse.com- Do not build xorg-x11-Xvnc-module on s390. It fails to build because macros.xorg-server is incomplete on s390 and the module would be useless without real X server anyway.
* Tue Jan 08 2019 msrbAATTsuse.com- Add U_viewer-reset-ctrl-alt-to-menu-state-on-focus.patch
* Fix the ALT and CTRL buttons in viewer\'s F8 menu. (bsc#1119354)
* Wed Sep 19 2018 Jason Sikes - Changed \"openssl\" requirement to \"openssl(cli)\"
* (bsc#1101470)
* Mon Aug 06 2018 msrbAATTsuse.com- Add xvnc.target to fix xvnc-novnc.service\'s dependency. (bnc#1103552)- Split the X server\'s VNC module into subpackage and give it dependency on the current extension ABI.
* Thu Aug 02 2018 msrbAATTsuse.com- Update to tigervnc 1.9.0
* Alternative, \"raw\" keyboard mode in the native client and all servers
* CapsLock/NumLock/ScrollLock synchronisation in the native client and all servers
* Automatic \"repair\" of JPEG artefacts on screen in all servers
* Support for UNIX sockets in the native client and in the UNIX servers
* Both clients now warn when sending the password over a possibly insecure channel
* Performance improvements in the Java client
* The Java client now requires Java 7
* Improved high latency handling in all servers
* Slightly better keyboard handling in x0vncserver
* x0vncserver now supports cursors and screen resize
* Xorg 1.20 can now be used as a base for Xvnc/libvnc.so - Fixes bnc#1103537- Removed patches (included in 1.9.0):
* u_tigervnc-show-unencrypted-warning.patch
* U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch
* U_handle_certificate_verification_for_saved_certs_correctly.patch
* u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
* u_add-support-for-X-server-1.20.0.patch
* U_vncviewer-Fix-fullscreen-scrolling.patch
* U_vncviewer-Fix-scrollbar-visibility.patch- Removed patches (no longer needed):
* tigervnc-1.8.0-nowindows.patch- Refreshed patches:
* n_tigervnc-date-time.patch
* tigervnc-clean-pressed-key-on-exit.patch
* u_tigervnc-add-autoaccept-parameter.patch
* u_tigervnc-ignore-epipe-on-write.patch- Added patches:
* n_correct_path_in_desktop_file.patch- Fixed typo in 10-libvnc.conf
* Fri Jun 08 2018 msrbAATTsuse.com- Updated u_add-support-for-X-server-1.20.0.patch to version sent upstream. Fixes GLX initialization.
* Wed Jun 06 2018 msrbAATTsuse.com- U_vncviewer-Fix-fullscreen-scrolling.patch, U_vncviewer-Fix-scrollbar-visibility.patch
* Fix scrolling in vncviewer. (boo#1095664)- u_add-support-for-X-server-1.20.0.patch
* Fix build against X server 1.20.0.
* Tue Apr 24 2018 msrbAATTsuse.com- Reload firewalld files after installation.
* Wed Apr 11 2018 jengelhAATTinai.de- Limit feature description to openSUSE. Ensure neutrality of description.
* Wed Apr 11 2018 msrbAATTsuse.com- Add u_change-button-layout-in-ServerDialog.patch
* To fit strings in languages with longer words... (bnc#1084865)- Refresh n_tigervnc-date-time.patch
* Completely hide the build time (bnc#1082968)
* Thu Mar 22 2018 msrbAATTsuse.com- Enable xvnc.socket if upgraded from previous installation that had VNC enabled in xinetd configuration. (bnc#1085974)- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.
* Wed Feb 28 2018 msrbAATTsuse.com- Replace SuSEFirewall2 by firewalld. (bnc#1081952)