libxtrans: Changes to 'master'
GitLab Mirror
gitlab-mirror at kemper.freedesktop.org
Fri May 5 19:31:40 UTC 2023
Xtrans.c | 36 +++++++++++++++++++++++++-----------
Xtransint.h | 4 +++-
Xtranssock.c | 33 +++------------------------------
3 files changed, 31 insertions(+), 42 deletions(-)
New commits:
commit 232a11a947564762689e63c3a6603d3f956f696d
Author: Demi Marie Obenour <demiobenour at gmail.com>
Date: Thu Dec 15 14:48:13 2022 -0500
DISPLAY starting with unix: or / is always a socket path
Do not consider anything else in this case.
Signed-off-by: Demi Marie Obenour <demiobenour at gmail.com>
commit b898f415e7c31de5b4beb06b22a5498049852e53
Author: Demi Marie Obenour <demiobenour at gmail.com>
Date: Thu Dec 15 14:43:37 2022 -0500
Allow full paths to sockets on non-macOS
This adds explicit checks for addresses that start with / or unix: and
uses full paths in this case.
Signed-off-by: Demi Marie Obenour <demiobenour at gmail.com>
commit e24adec1203cd25423ab2835a5be4f6b828b72a5
Author: Demi Marie Obenour <demiobenour at gmail.com>
Date: Thu Dec 17 03:28:45 2020 +0000
Remove client-side abstract socket support
CVE-2020-25697 and the Flatpak documentation show that clients using
abstract sockets without mutual authentication is unsafe.
TRANS_ABSTRACT remains supported, but it is now a no-op on the client
side. Abstract sockets are still supported for servers, as the X server
authenticates the client via other methods.
Signed-off-by: Demi Marie Obenour <demiobenour at gmail.com>
More information about the xorg-commit
mailing list