CVS commit: pkgsrc/net/libslirp

["Pierre Pronchery" <khorben%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   khorben
Date:           Thu Jun 25 04:14:43 UTC 2026

Modified Files:
        pkgsrc/net/libslirp: Makefile distinfo

Log Message:
net/libslirp: update to version 4.9.3

This is a security update for CVE-2026-9539: libslirp TCP URG OOB Read
Information Leak.

Changes in 4.9.3:

* Fix migration break on incorrect vmstate retcode

Changes in 4.9.2:

* Security:
  - oob: cap urgent data count to what is actually available
* Fixed:
  - Honor dns server port number on macos
  - Cope with SO_ERROR possibly failing
  - vmstate: pass on read/write errors for state
  - Fix port conflict
  - tcp_sockclosed: Set linger timer on remaining closing states
* Changed:
  - bootp: allow https for UEFI HTTP boot

Changes in 4.9.1:

* Fixed:
  - meson: use boolean defaults for boolean options
  - meson: specify that C++ is only used for host binaries
  - meson: add dependency override for libslirp
  - Do not link tests with libslirp.map
  - apple: Fix getting IPv4 DNS server address when IPv4 and IPv4 are
    interleaved
  - Windows: Fix ICMP generation
  - tcp: Fix starting the linger2 timer on socket shutdown
* Changed:
  - tcp: on input, reset TCPT_KEEP to TCPTV_KEEP_IDLE rather than TCPTV_KEEPINTVL
  - tcp: on input during init, reset TCPT_KEEP to TCPTV_KEEP_INIT
  - tcp: Reduce linger time to two minutes

Changes in 4.9.0:

* Added:
  - Add SlirpAddPollSocketCb and {,un}register_poll_socket that can be used from
    SLIRP_CONFIG_VERSION_MAX 6 to properly support socket handles on win64.
* Fixed:
  - bootp: Fill siaddr with tftp addr as per RFC2131
  - tcp_listen: Fix host forwarding on Windows
  - tftp: Fix address returned in proxying
* Changed:
  - Fix build on mold
  - Fix static linking
  - slirp_os_socket abstraction for Windows
  - cksum: Update implementation to include 64-bit computation support
  - Reduce compilation warnings on Windows

Changes in 4.8.0:

* Security:
  - tcp: Fix testing for last fragment
  - tftp: Fix use-after-free
* Added:
  - Add support for Haiku
  - ncsi: Add manufacturer's ID
  - ncsi: Add Get Version ID command
  - ncsi: Add out-of-band ethernet address
  - ncsi: Add Mellanox Get Mac Address handler
  - icmp6: Add echo request forwarding support
  - Add fuzzing infrastructure
* Fixed:
  - Fix missing cleanups
  - windows: Build fixes
  - ipv6: Use target address from Neighbor Advertisement
  - dns: Reject domain-search when any entry ends with ".."
  - dns: Use localhost as dns when /etc/resolv.conf empty
  - icmp: Handle ICMP packets as IPPROTO_IP on BSD
  - eth: pad ethernet frames to 60 bytes
* Removed:
  - windows: Bump the minimum Windows version to Windows 7

Tested on NetBSD/amd64.

XXX pull-up to pkgsrc-2026Q2


To generate a diff of this commit:
cvs rdiff -u -r1.8 -r1.9 pkgsrc/net/libslirp/Makefile
cvs rdiff -u -r1.7 -r1.8 pkgsrc/net/libslirp/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/libslirp/Makefile
diff -u pkgsrc/net/libslirp/Makefile:1.8 pkgsrc/net/libslirp/Makefile:1.9
--- pkgsrc/net/libslirp/Makefile:1.8    Thu Oct 23 20:38:50 2025
+++ pkgsrc/net/libslirp/Makefile        Thu Jun 25 04:14:43 2026
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.8 2025/10/23 20:38:50 wiz Exp $
+# $NetBSD: Makefile,v 1.9 2026/06/25 04:14:43 khorben Exp $
 
-DISTNAME=      libslirp-4.7.0
-PKGREVISION=   3
+DISTNAME=      libslirp-4.9.3
 CATEGORIES=    net
-MASTER_SITES=  https://gitlab.freedesktop.org/slirp/libslirp/uploads/60113f60cfd6abe2c16dde9f6c81b631/
+MASTER_SITES=  https://gitlab.freedesktop.org/-/project/2767/uploads/bdcbb727b502f93d312e631cc0980055/
 EXTRACT_SUFX=  .tar.xz
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/net/libslirp/distinfo
diff -u pkgsrc/net/libslirp/distinfo:1.7 pkgsrc/net/libslirp/distinfo:1.8
--- pkgsrc/net/libslirp/distinfo:1.7    Sun Nov  6 17:21:41 2022
+++ pkgsrc/net/libslirp/distinfo        Thu Jun 25 04:14:43 2026
@@ -1,6 +1,5 @@
-$NetBSD: distinfo,v 1.7 2022/11/06 17:21:41 triaxx Exp $
+$NetBSD: distinfo,v 1.8 2026/06/25 04:14:43 khorben Exp $
 
-BLAKE2s (libslirp-4.7.0.tar.xz) = ef73fb0de29a83b0c5f5e3d02f7bcd5257e1787ce5217afd34065856a92df973
-SHA512 (libslirp-4.7.0.tar.xz) = 00b943ec758d7c2d3213a239b1cb7376d2d06d851afd9d5a808c787a76dfdd442570253ca509085c6c3ef528472aec9216587dbfc3348d7eb325b92b8f8b1ac3
-Size (libslirp-4.7.0.tar.xz) = 110840 bytes
-SHA1 (patch-src_libslirp.h) = 47b1bf7ec380a8898377a87e71c80287663342a3
+BLAKE2s (libslirp-4.9.3.tar.xz) = 6e574bf1c81d319e5fe9efa346acd7c54d51e260abc81d0b763d45d4d69703fb
+SHA512 (libslirp-4.9.3.tar.xz) = 0a4d7e977d9877cc59298a05df58d285e58e0d9e80ccdcc4c95c5984e177b5642319d54b07fa650317c5a1c2a1a16d11a26cbd1e9b165724607b428d05c34a15
+Size (libslirp-4.9.3.tar.xz) = 132968 bytes