Subject: CVS commit: pkgsrc/x11/libXdmcp
From: Thomas Klausner
Date: 2019-03-17 09:04:00
Message id: 20190317080400.82ECDFB16@cvs.NetBSD.org

Log Message:
libXdmcp: update to 1.1.3.

This release provides a fix for CVE-2017-2625 for platforms which don't have
arc4random_buf() in their default libraries but do have getentropy(), such
as Linux platforms with a kernel version of 3.17 or newer and a glibc version
of 2.25 or newer.   (libXdmcp 1.1.2 already ensured that arc4random_buf()
is used on platforms that have it to provide sufficient entropy in XDMCP
key generation, but left other platforms with the weaker methods.  Linux
platforms could also have linked against libbsd to use arc4random_buf()
with libXdmcp 1.1.2 for stronger keys.)

Alan Coopersmith (2):
      Update README for gitlab migration
      libXdmcp 1.1.3

Benjamin Tissoires (2):
      Use getentropy() if arc4random_buf() is not available
      Fix compilation error when arc4random_buf is not available

Emil Velikov (1):
      autogen.sh: use quoted string variables

Helmut Grohne (1):
      do not use &fullrelvers; in xdmcp.xml (Debian bug 761628)

Jon TURNEY (1):
      Link with winsock library for socket functions on MinGW

Mihail Konev (1):
      autogen: add default patch prefix

Peter Hutterer (1):
      autogen.sh: use exec instead of waiting for configure to finish

Files:
RevisionActionfile
1.2modifypkgsrc/x11/libXdmcp/DESCR
1.10modifypkgsrc/x11/libXdmcp/Makefile
1.8modifypkgsrc/x11/libXdmcp/distinfo