CVS: cvs.openbsd.org: ports

CVSROOT:	/cvs
Module name:	ports
Changes by:	brad@cvs.openbsd.org	2003/02/24 20:32:17

Modified files:
	net/tightvnc   : Tag: OPENBSD_3_2 Makefile distinfo 
	net/tightvnc/patches: Tag: OPENBSD_3_2 patch-Imakefile 
	                      patch-Xvnc_config_cf_vnclibs_def 
	                      patch-vncviewer_Imakefile 
	net/tightvnc/pkg: Tag: OPENBSD_3_2 PLIST PLIST-viewer 

Log message:
SECURITY FIX: Update tightvnc to 1.2.7

The VNC server acts as an X server, but the script for starting it generates an MIT X cookie (which is used for X authentication) without using a strong enough random number generator. This could allow an attacker to be able to more easily guess the authentication cookie.

https://rhn.redhat.com/errata/RHSA-2003-041.html Received on Mon Feb 24 22:31:10 2003