Date: Sun, 14 Jul 2019 10:53:02 -0700
From: Alan Coopersmith <alan.coopersmith@oracle.com>
To: xorg-announce@lists.x.org
Subject: [ANNOUNCE] libICE 1.0.10
Message-ID: <20190714175302.GA15743@also.us.oracle.com>
MIME-Version: 1.0
User-Agent: Mutt/1.9.1 (2017-09-22)
Precedence: list
Cc: xorg@lists.x.org
Content-Type: multipart/mixed; boundary="===============0968260500=="
Errors-To: xorg-bounces@lists.x.org
Sender: "xorg" <xorg-bounces@lists.x.org>


--===============0968260500==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="FL5UXtIhxfXey3p5"
Content-Disposition: inline


--FL5UXtIhxfXey3p5
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

libICE provides the API for the Inter-Client Exchange protocol.

This release provides a fix for CVE-2017-2626 for platforms which don't have
arc4random_buf() in their default libraries but do have getentropy(), such
as Linux platforms with a kernel version of 3.17 or newer and a glibc versi=
on
of 2.25 or newer.   (libICE 1.0.9 already ensured that arc4random_buf()
is used on platforms that have it to provide sufficient entropy in ICE
key generation, but left other platforms with the weaker methods.  Linux
platforms could also have linked against libbsd to use arc4random_buf()
with libICE 1.0.9 for stronger keys.)

Alan Coopersmith (7):
      spec: Convert troff \*Q..\*U to DocBook <quote>...</quote>
      Remove obsolete B16 & B32 tags in struct definitions
      Update README for gitlab migration
      Update configure.ac bug URL for gitlab migration
      IceOpenConnection: check for malloc failure on connect_to_you too
      IceWritePad: always use zero values for pad bytes
      libICE 1.0.10

Allison Lortie (2):
      authutil: fix an out-of-bounds access
      authutil: support $XDG_RUNTIME_DIR/ICEauthority

Benjamin Tissoires (1):
      Use getentropy() if arc4random_buf() is not available

Emil Velikov (6):
      autogen.sh: use quoted string variables
      Kill off Strstr macro
      Kill off Time_t macro
      Remove unneeded ^L symbols.
      Kill off local ICE_t definitions
      configure.ac: set TRANS_CLIENT/SERVER

Eric Engestrom (3):
      Make sure errorStr is a free-able string
      Make sure error_message is a free-able string
      Make sure string is never NULL

Jon TURNEY (1):
      Include unistd.h for getpid()

Mihail Konev (1):
      autogen: add default patch prefix

Olivier Fourdan (3):
      IceListenForWellKnownConnections: Fix memleak
      _IceRead: Avoid possible use-after-free
      cleanup: Separate variable assignment and test

Peter Hutterer (1):
      autogen.sh: use exec instead of waiting for configure to finish

Remko van der Vossen (1):
      Bug 90616 - libICE build fails on array bounds check

Tobias Stoeckmann (2):
      Fix use after free on subsequent calls
      Always terminate strncpy results.

walter harms (3):
      Drop NULL check prior to free()
      make IceProtocolShutdown() more readable
      iceauth.c: FIX warning: unused variable 'ret' in 'arc4random_buf'

git tag: libICE-1.0.10

https://xorg.freedesktop.org/archive/individual/lib/libICE-1.0.10.tar.bz2
MD5:  76d77499ee7120a56566891ca2c0dbcf  libICE-1.0.10.tar.bz2
SHA1: 5b5eb125d4f43a3ab8153b0f850963ee6c982c24  libICE-1.0.10.tar.bz2
SHA256: 6f86dce12cf4bcaf5c37dddd8b1b64ed2ddf1ef7b218f22b9942595fb747c348  l=
ibICE-1.0.10.tar.bz2
SHA512: 2f1ef2c32c833c71894a08fa7e7ed53f301f6c7bd22485d71c12884d8e8b36b99f3=
62ec886349dcc84d08edc81c8b2cea035320831d64974edeba021b433c468  libICE-1.0.1=
0.tar.bz2
PGP:  https://xorg.freedesktop.org/archive/individual/lib/libICE-1.0.10.tar=
=2Ebz2.sig

https://xorg.freedesktop.org/archive/individual/lib/libICE-1.0.10.tar.gz
MD5:  25825f4caca2f75b112f287849455f15  libICE-1.0.10.tar.gz
SHA1: b042c56b8a9cb42324c1ee7c8ac43f1bb54cc835  libICE-1.0.10.tar.gz
SHA256: 1116bc64c772fd127a0d0c0ffa2833479905e3d3d8197740b3abd5f292f22d2d  l=
ibICE-1.0.10.tar.gz
SHA512: 2d4757f7325eb01180b5d7433cc350eb9606bd3afe82dabc8aa164feda75ef03a06=
24d74786e655c536c24a80d0ccb2f1e3ecbb04d3459b23f85455006ca8a91  libICE-1.0.1=
0.tar.gz
PGP:  https://xorg.freedesktop.org/archive/individual/lib/libICE-1.0.10.tar=
=2Egz.sig


--=20
	-Alan Coopersmith-               alan.coopersmith@oracle.com
	 Oracle Solaris Engineering - https://blogs.oracle.com/alanc

--FL5UXtIhxfXey3p5
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCgAGBQJdK2v7AAoJEM/fFIgoxkKnNl4QAIXPcLIIAg3VERmogU+vdWRR
Urva9g03RASJ6ufbkLw0C2MNuAZqppqicaD3Rqo8Db+W6gVdoPKgQMA39RG5KLKH
SYUE3zlmLrW6i8ld2g0LWSc35N8+4kUwLTw9mGYcQWPEEGuKDW1zgfKRZbu54ePH
+R58YvD5hBmJg1Oc+RJvtXE7aP8YI/omarucg+vEQBFiSEcMNrW3d6FLTmmJ7NrI
hheetENUtcfFDHn4EYiaE/9ryc2c+qt5AHqGI3wXE/Wb6xI8QRMImIFi7krg2j6N
eajijdwT7zlQklzT9kgpYrLPiPOqHbBZwZ1chmy6MtW0YdCUEiglCRKSWKKMSJMN
76dp7+WPTwJqbjBw9k5bxv9qt9wtrNY9bYSi4CYOM9SXnifZyPMPGKI0bfizUmQj
/NggY8OXajCNO3RLwE6TbYV89+NhmMNZNHejK4EXaqIRYmckWM+nhU9DgS2Is6cp
eDWuC5BFNxztj96m+PSSRi50UWm3tXYRqmTzMxn3r9T0Jgqpb9odZsNOcGcvOpRW
bAoLrPOol1fgcHbE/F79BRfj9HMln8g8rAkDLIvKl4je75x28FIxXjqnlkBENGQz
fkBjh+j3fpi4AHaZes/gZTKMIwlw57axMYrB2Fz2lXRJQ/2d0zNdvX8ot8yt1imv
hXAGTKhR/XGammdgYqTE
=4uK6
-----END PGP SIGNATURE-----

--FL5UXtIhxfXey3p5--

--===============0968260500==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KeG9yZ0BsaXN0
cy54Lm9yZzogWC5Pcmcgc3VwcG9ydApBcmNoaXZlczogaHR0cDovL2xpc3RzLmZyZWVkZXNrdG9w
Lm9yZy9hcmNoaXZlcy94b3JnCkluZm86IGh0dHBzOi8vbGlzdHMueC5vcmcvbWFpbG1hbi9saXN0
aW5mby94b3JnCllvdXIgc3Vic2NyaXB0aW9uIGFkZHJlc3M6ICUodXNlcl9hZGRyZXNzKXM=

--===============0968260500==--