CVE-2020-29260 · cross-distro fix matrix

CVE-2020-29260: It was discovered that LibVNCServer had a memory leak in the client cleanup

Affects 12 Linux releases across 24 (distro × package) combinations. First disclosed: 2026-06-23.

Fix per ecosystem

Each block below is a distro release where CVE-2020-29260 has a known fix. Run the listed command on that distro to remediate.

Source: Ubuntu USN

libvncserver→ fixed in0.9.13+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver
```
libvncclient1→ fixed in0.9.13+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncclient1
```
libvncserver-dev→ fixed in0.9.13+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver-dev
```
libvncserver1→ fixed in0.9.13+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver1
```

Source: Ubuntu USN

libvncserver→ fixed in0.9.14+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver
```
libvncclient1→ fixed in0.9.14+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncclient1
```
libvncserver-dev→ fixed in0.9.14+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver-dev
```
libvncserver1→ fixed in0.9.14+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver1
```

Source: Ubuntu USN

libvncserver→ fixed in0.9.15+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver
```
libvncclient1→ fixed in0.9.15+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncclient1
```
libvncserver-dev→ fixed in0.9.15+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver-dev
```
libvncserver1→ fixed in0.9.15+dfsg-1ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver1
```

Source: Ubuntu USN

libvncserver→ fixed in0.9.15+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver
```
libvncclient1→ fixed in0.9.15+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncclient1
```
libvncserver-dev→ fixed in0.9.15+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver-dev
```
libvncserver1→ fixed in0.9.15+dfsg-3ubuntu0.1USN-8463-1
```
sudo apt-get install --only-upgrade -y libvncserver1
```

Source: Debian Security Tracker

libvncserver→ fixed in0.9.13+dfsg-2+deb11u1urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libvncserver
```

Source: Debian Security Tracker

libvncserver→ fixed in0.9.13+dfsg-5urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libvncserver
```

Source: Debian Security Tracker

libvncserver→ fixed in0.9.13+dfsg-5urgency: not yet assigned
```
sudo apt-get install --only-upgrade -y libvncserver
```