pool/xtrans
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Update to 1.5.0

Browse Source 
xtrans is a library of code that is shared among various X packages to handle
network protocol transport in a modular fashion, allowing a single place to
add new transport types - but it is *not* a shared library, more like a \
"header-only" library.  It is used by the X server, the XIM support in libX11,
libICE, the X font server, and related components.  Because this is not a
shared library, the changes in this release will only take effect in consumers
that are rebuilt on a system with this release of xtrans installed.
This release makes progress towards resolving CVE-2020-25697, reported in
https://www.openwall.com/lists/oss-security/2020/11/09/3 .  Clients will no
longer attempt to connect to sockets in the abstract namespace, though
servers will still bind to them to prevent other programs binding to those
names to intercept connections from clients using libraries built with older
versions of libxtrans or libxcb while the servers are running.  Clients can
also now specify a full Unix domain socket pathname to connect to, instead
of relying on built-in defaults under /tmp.  (Note that libX11 1.4.0 and later
relies on libxcb for making connections instead of libxtrans, so X11 protocol
clients will get this support in an upcoming release of libxcb, and the changes
in xtrans will only affect clients of other protocols using libxtrans, such as
XIM, ICE, SM, and the font service protocols.)
This release also removes support for System V UNIX platforms other than
Solaris and the illumos family - OS'es from SCO, AT&T's Unix Systems Group,
Novell, and NCR are no longer supported.

OBS-URL: https://build.opensuse.org/package/show/X11:XOrg/xtrans?expand=0&rev=28
This commit is contained in:
Stefan Dirsch 2023-06-10 10:44:26 +00:00 committed by Git OBS Bridge
parent 6a51063e53
commit 5c502ad905
4 changed files with 35 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
xtrans-1.4.0.tar.bz2 (Stored with Git LFS)
View File

Binary file not shown.

3
xtrans-1.5.0.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1ba4b703696bfddbf40bacf25bce4e3efb2a0088878f017a50e9884b0c8fb1bd
size 170388

29
xtrans.changes
View File

@ -1,3 +1,32 @@
-------------------------------------------------------------------
Sat Jun 10 10:39:31 UTC 2023 - Stefan Dirsch <sndirsch@suse.com>
- Update to 1.5.0
xtrans is a library of code that is shared among various X packages to handle
network protocol transport in a modular fashion, allowing a single place to
add new transport types - but it is *not* a shared library, more like a \
"header-only" library. It is used by the X server, the XIM support in libX11,
libICE, the X font server, and related components. Because this is not a
shared library, the changes in this release will only take effect in consumers
that are rebuilt on a system with this release of xtrans installed.
This release makes progress towards resolving CVE-2020-25697, reported in
https://www.openwall.com/lists/oss-security/2020/11/09/3 . Clients will no
longer attempt to connect to sockets in the abstract namespace, though
servers will still bind to them to prevent other programs binding to those
names to intercept connections from clients using libraries built with older
versions of libxtrans or libxcb while the servers are running. Clients can
also now specify a full Unix domain socket pathname to connect to, instead
of relying on built-in defaults under /tmp. (Note that libX11 1.4.0 and later
relies on libxcb for making connections instead of libxtrans, so X11 protocol
clients will get this support in an upcoming release of libxcb, and the changes
in xtrans will only affect clients of other protocols using libxtrans, such as
XIM, ICE, SM, and the font service protocols.)
This release also removes support for System V UNIX platforms other than
Solaris and the illumos family - OS'es from SCO, AT&T's Unix Systems Group,
Novell, and NCR are no longer supported.
-------------------------------------------------------------------
Wed Sep 30 08:49:47 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>

6
xtrans.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package xtrans
#
# Copyright (c) 2020 SUSE LLC
# Copyright (c) 2023 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -17,13 +17,13 @@
Name: xtrans
Version: 1.4.0
Version: 1.5.0
Release: 0
Summary: Library to handle network protocol transport in X
License: MIT
Group: Development/Libraries/X11
URL: https://xorg.freedesktop.org/
Source: http://xorg.freedesktop.org/archive/individual/lib/%{name}-%{version}.tar.bz2
Source: http://xorg.freedesktop.org/archive/individual/lib/%{name}-%{version}.tar.xz
Patch0: p_xauth.diff
Patch1: n_unifdef-LBXPROXY_t-and-TEST_t.patch
Patch2: u_xtrans-noarch-pkgconfig.patch