CVS commit: [pkgsrc-2026Q2] pkgsrc/net/libslirp

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Jul 22 15:15:25 UTC 2026

Modified Files:
        pkgsrc/net/libslirp [pkgsrc-2026Q2]: Makefile distinfo

Log Message:
Pullup ticket #7191 - requested by khorben
net/libslirp: Security fix

Revisions pulled up:
- net/libslirp/Makefile                                         1.9
- net/libslirp/distinfo                                         1.8

---
   Module Name:    pkgsrc
   Committed By:   khorben
   Date:           Thu Jun 25 04:14:43 UTC 2026

   Modified Files:
           pkgsrc/net/libslirp: Makefile distinfo

   Log Message:
   net/libslirp: update to version 4.9.3

   This is a security update for CVE-2026-9539: libslirp TCP URG OOB Read
   Information Leak.

   Changes in 4.9.3:

   * Fix migration break on incorrect vmstate retcode

   Changes in 4.9.2:

   * Security:
     - oob: cap urgent data count to what is actually available
   * Fixed:
     - Honor dns server port number on macos
     - Cope with SO_ERROR possibly failing
     - vmstate: pass on read/write errors for state
     - Fix port conflict
     - tcp_sockclosed: Set linger timer on remaining closing states
   * Changed:
     - bootp: allow https for UEFI HTTP boot

   Changes in 4.9.1:

   * Fixed:
     - meson: use boolean defaults for boolean options
     - meson: specify that C++ is only used for host binaries
     - meson: add dependency override for libslirp
     - Do not link tests with libslirp.map
     - apple: Fix getting IPv4 DNS server address when IPv4 and IPv4 are
       interleaved
     - Windows: Fix ICMP generation
     - tcp: Fix starting the linger2 timer on socket shutdown
   * Changed:
     - tcp: on input, reset TCPT_KEEP to TCPTV_KEEP_IDLE rather than =
   TCPTV_KEEPINTVL
     - tcp: on input during init, reset TCPT_KEEP to TCPTV_KEEP_INIT
     - tcp: Reduce linger time to two minutes

   Changes in 4.9.0:

   * Added:
     - Add SlirpAddPollSocketCb and {,un}register_poll_socket that can be =
   used from
       SLIRP_CONFIG_VERSION_MAX 6 to properly support socket handles on =
   win64.
   * Fixed:
     - bootp: Fill siaddr with tftp addr as per RFC2131
     - tcp_listen: Fix host forwarding on Windows
     - tftp: Fix address returned in proxying
   * Changed:
     - Fix build on mold
     - Fix static linking
     - slirp_os_socket abstraction for Windows
     - cksum: Update implementation to include 64-bit computation support
     - Reduce compilation warnings on Windows

   Changes in 4.8.0:

   * Security:
     - tcp: Fix testing for last fragment
     - tftp: Fix use-after-free
   * Added:
     - Add support for Haiku
     - ncsi: Add manufacturer's ID
     - ncsi: Add Get Version ID command
     - ncsi: Add out-of-band ethernet address
     - ncsi: Add Mellanox Get Mac Address handler
     - icmp6: Add echo request forwarding support
     - Add fuzzing infrastructure
   * Fixed:
     - Fix missing cleanups
     - windows: Build fixes
     - ipv6: Use target address from Neighbor Advertisement
     - dns: Reject domain-search when any entry ends with ".."
     - dns: Use localhost as dns when /etc/resolv.conf empty
     - icmp: Handle ICMP packets as IPPROTO_IP on BSD
     - eth: pad ethernet frames to 60 bytes
   * Removed:
     - windows: Bump the minimum Windows version to Windows 7

   Tested on NetBSD/amd64.

   XXX pull-up to pkgsrc-2026Q2


To generate a diff of this commit:
cvs rdiff -u -r1.8 -r1.8.6.1 pkgsrc/net/libslirp/Makefile
cvs rdiff -u -r1.7 -r1.7.30.1 pkgsrc/net/libslirp/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/libslirp/Makefile
diff -u pkgsrc/net/libslirp/Makefile:1.8 pkgsrc/net/libslirp/Makefile:1.8.6.1
--- pkgsrc/net/libslirp/Makefile:1.8    Thu Oct 23 20:38:50 2025
+++ pkgsrc/net/libslirp/Makefile        Wed Jul 22 15:15:25 2026
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.8 2025/10/23 20:38:50 wiz Exp $
+# $NetBSD: Makefile,v 1.8.6.1 2026/07/22 15:15:25 maya Exp $
 
-DISTNAME=      libslirp-4.7.0
-PKGREVISION=   3
+DISTNAME=      libslirp-4.9.3
 CATEGORIES=    net
-MASTER_SITES=  https://gitlab.freedesktop.org/slirp/libslirp/uploads/60113f60cfd6abe2c16dde9f6c81b631/
+MASTER_SITES=  https://gitlab.freedesktop.org/-/project/2767/uploads/bdcbb727b502f93d312e631cc0980055/
 EXTRACT_SUFX=  .tar.xz
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/net/libslirp/distinfo
diff -u pkgsrc/net/libslirp/distinfo:1.7 pkgsrc/net/libslirp/distinfo:1.7.30.1
--- pkgsrc/net/libslirp/distinfo:1.7    Sun Nov  6 17:21:41 2022
+++ pkgsrc/net/libslirp/distinfo        Wed Jul 22 15:15:25 2026
@@ -1,6 +1,5 @@
-$NetBSD: distinfo,v 1.7 2022/11/06 17:21:41 triaxx Exp $
+$NetBSD: distinfo,v 1.7.30.1 2026/07/22 15:15:25 maya Exp $
 
-BLAKE2s (libslirp-4.7.0.tar.xz) = ef73fb0de29a83b0c5f5e3d02f7bcd5257e1787ce5217afd34065856a92df973
-SHA512 (libslirp-4.7.0.tar.xz) = 00b943ec758d7c2d3213a239b1cb7376d2d06d851afd9d5a808c787a76dfdd442570253ca509085c6c3ef528472aec9216587dbfc3348d7eb325b92b8f8b1ac3
-Size (libslirp-4.7.0.tar.xz) = 110840 bytes
-SHA1 (patch-src_libslirp.h) = 47b1bf7ec380a8898377a87e71c80287663342a3
+BLAKE2s (libslirp-4.9.3.tar.xz) = 6e574bf1c81d319e5fe9efa346acd7c54d51e260abc81d0b763d45d4d69703fb
+SHA512 (libslirp-4.9.3.tar.xz) = 0a4d7e977d9877cc59298a05df58d285e58e0d9e80ccdcc4c95c5984e177b5642319d54b07fa650317c5a1c2a1a16d11a26cbd1e9b165724607b428d05c34a15
+Size (libslirp-4.9.3.tar.xz) = 132968 bytes