Fabrice Fontaine e3d7d0371f package/libvncserver: fix CVE-2019-20788 ...

libvncclient/cursor.c in LibVNCServer through 0.9.12 has a
HandleCursorShape integer overflow and heap-based buffer overflow via a
large height or width value. NOTE: this may overlap CVE-2019-15690.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 705adbaf9a)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2020-05-11 21:14:45 +02:00

..

0001-CMakeLists.txt-fix-build-without-C.patch

…

0002-libvnc-client-server-.pc.cmakein-remove-zlib.patch

…

0003-Limit-lenght-to-INT_MAX-bytes-in-rfbProcessFileTransferReadBuffer.patch

…

0004-rfbserver-don-t-leak-stack-memory-to-the-remote.patch

package/libvncserver: fix CVE-2019-15681

2020-03-03 22:10:16 +01:00

0005-CMakeLists.txt-don-t-build-tight.c-without-png-or-zl.patch

package/libvncserver: fix jpeg build without png or zlib

2020-03-08 13:49:23 +01:00

0006-libvncclient-cursor-limit-width-height-input-values.patch

package/libvncserver: fix CVE-2019-20788

2020-05-11 21:14:45 +02:00

Config.in

…

libvncserver.hash

…

libvncserver.mk

package/libvncserver: fix CVE-2019-20788

2020-05-11 21:14:45 +02:00