Sat Jun 3 06:20:21 2023 UTC ()
xtrans: update to 1.5.0.

xtrans is a library of code that is shared among various X packages to handle
network protocol transport in a modular fashion, allowing a single place to
add new transport types - but it is *not* a shared library, more like a \
"header-only" library.  It is used by the X server, the XIM support in libX11,
libICE, the X font server, and related components.  Because this is not a
shared library, the changes in this release will only take effect in consumers
that are rebuilt on a system with this release of xtrans installed.

This release makes progress towards resolving CVE-2020-25697, reported in
https://www.openwall.com/lists/oss-security/2020/11/09/3 .  Clients will no
longer attempt to connect to sockets in the abstract namespace, though
servers will still bind to them to prevent other programs binding to those
names to intercept connections from clients using libraries built with older
versions of libxtrans or libxcb while the servers are running.  Clients can
also now specify a full Unix domain socket pathname to connect to, instead
of relying on built-in defaults under /tmp.  (Note that libX11 1.4.0 and later
relies on libxcb for making connections instead of libxtrans, so X11 protocol
clients will get this support in an upcoming release of libxcb, and the changes
in xtrans will only affect clients of other protocols using libxtrans, such as
XIM, ICE, SM, and the font service protocols.)

This release also removes support for System V UNIX platforms other than
Solaris and the illumos family - OS'es from SCO, AT&T's Unix Systems Group,
Novell, and NCR are no longer supported.

Adam Jackson (4):
      unifdef USG and NCR
      Delete SCO support
      Remove non-Solaris SysV support
      TEST_t is never defined

Alan Coopersmith (5):
      Build xz tarballs instead of bzip2
      Fix spelling/wording issues
      gitlab CI: add a basic build test
      Remove "All rights reserved" from Oracle copyright notices
      xtrans 1.5.0

Demi Marie Obenour (3):
      Remove client-side abstract socket support
      Allow full paths to sockets on non-macOS
      DISPLAY starting with unix: or / is always a socket path

Keith Packard (2):
      move is_numeric to Xtranssock.c and only define for TCPCONN or TRANS_REOPEN
      Use font server ErrorF/VErrorF instead of private versions

Olivier Fourdan (1):
      Allow partial connection to succeed

Ray Strode (1):
      Automatically disable inet6 transport if ipv6 is disabled on machine


(wiz)
diff -r1.31 -r1.32 pkgsrc/x11/xtrans/Makefile
diff -r1.29 -r1.30 pkgsrc/x11/xtrans/distinfo

cvs diff -r1.31 -r1.32 pkgsrc/x11/xtrans/Makefile (expand / switch to unified diff)

--- pkgsrc/x11/xtrans/Makefile 2022/11/09 13:14:32 1.31
+++ pkgsrc/x11/xtrans/Makefile 2023/06/03 06:20:21 1.32
@@ -1,16 +1,16 @@ @@ -1,16 +1,16 @@
1# $NetBSD: Makefile,v 1.31 2022/11/09 13:14:32 joerg Exp $ 1# $NetBSD: Makefile,v 1.32 2023/06/03 06:20:21 wiz Exp $
2 2
3DISTNAME= xtrans-1.4.0 3DISTNAME= xtrans-1.5.0
4CATEGORIES= x11 net 4CATEGORIES= x11 net
5MASTER_SITES= ${MASTER_SITE_XORG:=lib/} 5MASTER_SITES= ${MASTER_SITE_XORG:=lib/}
6EXTRACT_SUFX= .tar.bz2 6EXTRACT_SUFX= .tar.xz
7 7
8MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
9HOMEPAGE= https://xorg.freedesktop.org/ 9HOMEPAGE= https://xorg.freedesktop.org/
10COMMENT= Network API translation layer to insulate X 10COMMENT= Network API translation layer to insulate X
11 11
12GNU_CONFIGURE= yes 12GNU_CONFIGURE= yes
13 13
14PKGCONFIG_OVERRIDE+= xtrans.pc.in 14PKGCONFIG_OVERRIDE+= xtrans.pc.in
15 15
16.include "../../mk/bsd.pkg.mk" 16.include "../../mk/bsd.pkg.mk"

cvs diff -r1.29 -r1.30 pkgsrc/x11/xtrans/distinfo (expand / switch to unified diff)

--- pkgsrc/x11/xtrans/distinfo 2021/10/26 11:34:58 1.29
+++ pkgsrc/x11/xtrans/distinfo 2023/06/03 06:20:21 1.30
@@ -1,5 +1,5 @@ @@ -1,5 +1,5 @@
1$NetBSD: distinfo,v 1.29 2021/10/26 11:34:58 nia Exp $ 1$NetBSD: distinfo,v 1.30 2023/06/03 06:20:21 wiz Exp $
2 2
3BLAKE2s (xtrans-1.4.0.tar.bz2) = 86d5830e04abeda4d03b6d939f4e218e477eb75dc132399df00c194a3be48eb0 3BLAKE2s (xtrans-1.5.0.tar.xz) = 0195e75843f69f5c52b2ec861bb7f9b784325b51b8e678e8840bae4512519d27
4SHA512 (xtrans-1.4.0.tar.bz2) = 4fea89a3455c0e13321cbefa43340016dbb59bdd0dbdb5b796c1a6d2a6b1fd63cf1327b769ab426286b9c54b32ec764a50cd2b46228e4e43b841bda6b94de214 4SHA512 (xtrans-1.5.0.tar.xz) = e8091f11d4ad2b14e01de3eac56bdf2267ea26687ce66e3056374d0d02e049480c0b27c482f8828a0efd086f1e4c485108ca4dce3f83d66c1896effa3b38b228
5Size (xtrans-1.4.0.tar.bz2) = 185371 bytes 5Size (xtrans-1.5.0.tar.xz) = 170388 bytes