Kudos for the quick fix! A lot of us are not going to be able to install it without the source though. When will it be released? I recommend everyone running VNC behind SSH if possible to mitigate these attacks.