As of kdenetwork-4.5.80, libvncserver code is bundled, here's the upstream commit message: Import a fork of libvncserver 0.9.7. This is currently required to be able to split off the event processing code in small functions so that it is possible to integrate libvncserver's event loop code with Qt's event loop properly. This is also what vino does; the whole event loop integration idea was taken from there. :(
That means we need en exception from FESCo to ship bundled library. Was an exception granted for vino? Is it possible to reuse vino's bundled libvncserver for krfb (it can be packaged than and used by these two apps).
looks like 4.5.95 no longer includes this. yay.
Huh? I just checked the current 4.6 branch, it's still there.
Still there in trunk as well. Unfortunately, that fork is there to stay. If we want to use the system libvncserver, we need to fork/patch krfb.
I didn't see it in kdenetwork-4.5.95 tarball (as a matter of fact, the krdc/vnc support was lacking because BR: libvncserver-devel was missing)
ok, lame. libvncserver is there for krfb, krdc needs/uses system libvncserver
This bug appears to have been reported against 'rawhide' during the Fedora 19 development cycle. Changing version to '19'. (As we did not run this process for some time, it could affect also pre-Fedora 19 development cycle bugs. We are very sorry. It will help us with cleanup during Fedora 19 End Of Life. Thank you.) More information and reason for this action is here: https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora19
%changelog * Sun Aug 03 2014 Rex Dieter <rdieter> 4.13.3-2 - krfb: unbundle libvncserver (CVE-2014-4607, #655844)
libvncserver-0.9.10-0.4.20140718git9453be42.fc21 includes krfb-related patches, and krfb uses that in f21+ Was a little nervous backporting more than that.