libxtrans: Changes to 'master'

GitLab Mirror gitlab-mirror at kemper.freedesktop.org
Fri May 5 19:31:40 UTC 2023


 Xtrans.c     |   36 +++++++++++++++++++++++++-----------
 Xtransint.h  |    4 +++-
 Xtranssock.c |   33 +++------------------------------
 3 files changed, 31 insertions(+), 42 deletions(-)

New commits:
commit 232a11a947564762689e63c3a6603d3f956f696d
Author: Demi Marie Obenour <demiobenour at gmail.com>
Date:   Thu Dec 15 14:48:13 2022 -0500

    DISPLAY starting with unix: or / is always a socket path
    
    Do not consider anything else in this case.
    
    Signed-off-by: Demi Marie Obenour <demiobenour at gmail.com>

commit b898f415e7c31de5b4beb06b22a5498049852e53
Author: Demi Marie Obenour <demiobenour at gmail.com>
Date:   Thu Dec 15 14:43:37 2022 -0500

    Allow full paths to sockets on non-macOS
    
    This adds explicit checks for addresses that start with / or unix: and
    uses full paths in this case.
    
    Signed-off-by: Demi Marie Obenour <demiobenour at gmail.com>

commit e24adec1203cd25423ab2835a5be4f6b828b72a5
Author: Demi Marie Obenour <demiobenour at gmail.com>
Date:   Thu Dec 17 03:28:45 2020 +0000

    Remove client-side abstract socket support
    
    CVE-2020-25697 and the Flatpak documentation show that clients using
    abstract sockets without mutual authentication is unsafe.
    TRANS_ABSTRACT remains supported, but it is now a no-op on the client
    side.  Abstract sockets are still supported for servers, as the X server
    authenticates the client via other methods.
    
    Signed-off-by: Demi Marie Obenour <demiobenour at gmail.com>



More information about the xorg-commit mailing list