LWN.net Logo

GDM2 2.14.8 (stable), the "SecurityFix" Release

From:  Brian Cameron <Brian.Cameron-AT-Sun.COM>
To:  gnome-announce-list-AT-gnome.org, gdm-list-AT-gnome.org
Subject:  GDM2 2.14.8 (stable), the "SecurityFix" Release
Date:  Wed, 07 Jun 2006 17:27:13 -0500


AOOH-GAH
--------

(If you have no clue what gdm is, skip a few paragraphs down first)

The 2.14.8 release is a stable release of GDM with the following
new features.  Note this contains an important security fix, so
users and distros should update immediately.

- Correction for serious security issue where the user can enter the
   GDM configuration GUI with a user password when the Face Browser
   is enabled.  Refer to bugzilla.gnome.org bug #343476 (Brian
   Cameron)  This issue impacts all versions of GDM 2.8.0.0-2.8.0.7,
   2.14.0-2.14.7, and 2.15.0-2.15.3.  This issue was reported to
   vendor-sec one week ago and has ID #CVE-2006-2452.

- Fixed bug where when the "Include All" button is modified in the
   Users tab, the Automatic/Timed login dropdown lists update
   properly.  (Brian Cameron)

- Now gdmflexiserver calls gdmcomm_check with FALSE so it will not
   pop up a dialog.  gdmflexiserver can be run with the --command
   option which can be used when the user does not have permission to
   a DISPLAY, so trying to show a dialog was causing gdmflexiserver
   to core dump when the check failed.   (Brian Cameron)

- Added gestures to the AccessKeyMouseEvents configuration file
   so that users can access more accessibility features using
   dwell gestures.  (Brian Cameron)

- Translation updates (Laurent Dhima, Pema Geyleg, Theppitak
   Karoonboonyanan, Gabor Kelemen, Ahmad Riza H Nst, Vincent
   van Adrighem)

Note:  GDM2 was originally written by Martin K. Petersen <mkp@mkp.net>.
Much work has been done on GDM2 by George Lebl, and Brian Cameron
currently shares maintainership duties with the Queen of England.

Note2:  If installing from the tarball do note that make install
overwrites most of the setup files, all except gdm.conf.  It will
however save backups with the .orig extension first.

#ifndef GDM_DISABLE_DEPRECATED
Note3:  Note3 has been depracated ...
#endif /* GDM_DISABLE_DEPRECATED */

Downloading:
============

Online Documentation - http://www.gnome.org/projects/gdm/
Latest Stable        - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.14/
Latest Unstable      - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.15/

No RPM this time around BTW.  Have fun.  A spec file is included though,
so you can try:

   rpmbuild -ta gdm-whatever.tar.gz

Have fun,

Brian
_______________________________________________
gnome-announce-list mailing list
gnome-announce-list@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-announce-list


(Log in to post comments)

Copyright © 2006, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds