These packages were built with libjpeg-turbo 2.0.6:
https://sourceforge.net/projects/libjpeg-turbo/files/2.0.6/

Package signatures

To ensure the integrity of the TurboVNC binary packages, the RPM and DEB files and the source tarball are signed using the following key:
https://www.TurboVNC.org/key/VGL-GPG-KEY
https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xae1a7ba4efff9a9987e1474c4baccab36e7fe9a1
and the Windows installers and Mac app/package/DMG are signed using a code signing certificate.

2.2.6

Significant changes relative to 2.2.5:

1. The TurboVNC Server, if started with the -nevershared argument, now rejects new connections more gracefully, by sending an RFB authentication failure message to the potential viewer to notify it of the reason behind the rejection.

2. Fixed an issue in the Java TurboVNC Viewer's built-in SSH client whereby the IdentityFile keyword in the OpenSSH config file was ignored if either ~/.ssh/id_dsa or ~/.ssh/id_rsa existed.

3. Fixed an issue with the TurboVNC Mac package whereby TurboVNC Viewer.app would not be installed into /Applications/TurboVNC if another app by the same name already existed elsewhere on the startup disk.

4. The PAM User/Password authentication method in the TurboVNC Server (which is used with the Unix Login and VeNCrypt *Plain security types) will no longer succeed if a user's account or password is expired.

5. Disabled multithreaded Tight encoding on FreeBSD and similar systems, because the feature segfaults for unknown reasons.

6. Fixed an error ("Server TLS ERROR: Could not load libssl") that occurred when attempting to use TLS encryption with the TurboVNC Server (built with TVNC_DLOPENSSL=1, which is the default) running on FreeBSD 12.x.

7. Added two Xvnc command-line options (-maxauthfails and -authfailtimeout) that can be used to specify the maximum number of consecutive VNC password or OTP authentication failures allowed (0 = no limit) before connections to a TurboVNC session are temporarily blocked, as well as the initial length of time for which those connections are blocked. (This timeout period automatically doubles with each subsequent consecutive VNC password or OTP authentication failure.)

8. The vncserver script now invokes /usr/bin/env perl rather than /usr/bin/perl, for compatibility with FreeBSD and other operating systems that install Perl into a directory other than /usr/bin.

9. Fixed an issue in the TurboVNC Viewer whereby, with certain client-side keyboard layouts (Spanish, for instance), an XK_KP_Separator (0xFFAC) key symbol was erroneously transmitted to the VNC server when the numeric keypad decimal key was pressed or released, even though the corresponding keyboard layout on a Un*x system would have generated an XK_KP_Decimal (0xFFAE) key symbol for the same key.

10. Fixed an issue in the Linux/Un*x TurboVNC Viewer whereby, if the current keyboard layout generated an XK_KP_Separator (0xFFAC) key symbol for the numeric keypad decimal key, an XK_comma (0x002C) key symbol was erroneously transmitted to the VNC server instead.

11. If interframe comparison is enabled, the automatic lossless refresh (ALR) feature in the TurboVNC Server now ignores redundant framebuffer updates (framebuffer updates whose contents are completely eliminated by interframe comparison.) This prevents ALR from being defeated by ill-behaved applications that continuously render the same image.

12. Fixed an issue in the TurboVNC Server whereby, when connecting over a high-latency or low-bandwidth network with the TurboVNC Viewer or another VNC viewer that supports the RFB flow control extensions, the automatic lossless refresh (ALR) feature sometimes failed to send an ALR.

13. To prevent performance degradation on high-latency networks while using the automatic lossless refresh (ALR) feature, the TurboVNC Server now temporarily increases the ALR timeout to ensure that the timeout is always greater than the network round-trip time measured by the RFB flow control extensions.

14. The vncserver script now checks for the swrast DRI driver under /usr/lib/aarch64-linux-gnu, /usr/lib/arm-linux-gnueabihf, and /usr/lib/arm-linux-gnueabi, the system library paths used by Debian-based Arm Linux distributions. This fixes an issue whereby the TurboVNC Server's built-in software OpenGL implementation failed to initialize on such systems, which prevented compositing window managers such as GNOME 3 from launching.