CVSROOT:        /cvs
Module name:    ports
Changes by:     [email protected]    2014/08/26 17:22:02

Modified files:
        x11/kde4/krfb  : Makefile 
Added files:
        x11/kde4/krfb/patches: patch-libvncserver_lzoconf_h 
                               patch-libvncserver_lzodefs_h 
                               patch-libvncserver_minilzo_c 
                               patch-libvncserver_minilzo_h 

Log message:
Security fix for krfb 4.13 branch, CVE-2014-4607:

krfb embeds libvncserver which embeds liblzo2, it contains various flaws
that result in integer overflow problems.

This commit actually updates bundled lzo library, as suggested by upstream.

Reply via email to