[Buildroot] [PATCH 2/2] package/libvncserver: fix CVE-2019-15681

[Peter Korsgaard]

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:

 > LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a
 > memory leak (CWE-655) in VNC server code, which allow an attacker to
 > read stack memory and can be abused for information disclosure. Combined
 > with another vulnerability, it can be used to leak stack memory and
 > bypass ASLR. This attack appear to be exploitable via network
 > connectivity. These vulnerabilities have been fixed in commit
 > d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>

Committed to 2019.02.x and 2019.11.x, thanks.

-- 
Bye, Peter Korsgaard