* This release provides a fix for CVE-2017-2626 for platforms
which don't have arc4random_buf() in their default libraries
but do have getentropy(), such as Linux platforms with a kernel
version of 3.17 or newer and a glibc version of 2.25 or newer.
(libICE 1.0.9 already ensured that arc4random_buf() is used on
platforms that have it to provide sufficient entropy in ICE
key generation, but left other platforms with the weaker methods.
Linux platforms could also have linked against libbsd to use
arc4random_buf() with libICE 1.0.9 for stronger keys.)
- supersedes U_Use-getentropy-if-arc4random_buf-is-not-available.patch
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libICE?expand=0&rev=18
* This release fixes a number of issues found by static analysis and
compiler warnings, and other minor code cleanups. On systems with
arc4random() in either libc or libbsd, it will now use that function
for generating authentication cookies.
OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/libICE?expand=0&rev=12
