[Buildroot] [PATCH] libvncserver: add upstream security fix for CVE-2018-7225

[Thomas Petazzoni]

Hello,

On Sat,  9 Jun 2018 18:02:29 +0200, Peter Korsgaard wrote:
> Fixes CVE-2018-7225 - An issue was discovered in LibVNCServer through
> 0.9.11.  rfbProcessClientNormalMessage() in rfbserver.c does not sanitize
> msg.cct.length, leading to access to uninitialized and potentially sensitive
> data or possibly unspecified other impact (e.g., an integer overflow) via
> specially crafted VNC packets.
> 
> Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
> ---
>  ...0001-Limit-client-cut-text-length-to-1-MB.patch | 65 ++++++++++++++++++++++
>  1 file changed, 65 insertions(+)
>  create mode 100644 package/libvncserver/0001-Limit-client-cut-text-length-to-1-MB.patch

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com