Public bug reported: >From https://lists.ubuntu.com/archives/ubuntu-devel- discuss/2018-December/018202.html:
" Hello, I found this e-mail as a maintainer of xtightvncviewer package in Ubuntu 18.04 release. I wanted to warn you that recently I have reported 4 vulnerabilities in tightvnc 1.3.X, that is used in Ubuntu and developers refused to patch these vulnerabilities. More information including overview of the vulnerabilities: https://www.openwall.com/lists/oss-security/2018/12/10/5 Best Regards, Pavel Cheremushkin Security Researcher| ICS CERT Vulnerability Research Group | Kaspersky Lab 39A bld.2 Leningradskoye Highway, Moscow 125212, Russia | www.kaspersky.com<http://www.kaspersky.com/>,www.securelist.com<http://www.securelist .com/> " ** Affects: tightvnc (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1808989 Title: tightvnc vulnerabilities To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/tightvnc/+bug/1808989/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs