[#] http://marc.info/?l=openbsd-ports-cvs&m=140909535715699&w=2
openbsd-ports-cvs(obsdave,2) — All
2014-08-27 03:55:14


Module name: ports
Changes by: zhuk@cvs.openbsd.org 2014/08/26 17:22:02

Modified files:
x11/kde4/krfb : Makefile
Added files:
x11/kde4/krfb/patches: patch-libvncserver_lzoconf_h
patch-libvncserver_lzodefs_h
patch-libvncserver_minilzo_c
patch-libvncserver_minilzo_h

Log message:
Security fix for krfb 4.13 branch, CVE-2014-4607:

krfb embeds libvncserver which embeds liblzo2, it contains various flaws
that result in integer overflow problems.

This commit actually updates bundled lzo library, as suggested by upstream.