GDM2 2.14.8 (stable), the "SecurityFix" Release
[Posted June 9, 2006 by cook]
| From: |
| Brian Cameron <Brian.Cameron-AT-Sun.COM> |
| To: |
| gnome-announce-list-AT-gnome.org, gdm-list-AT-gnome.org |
| Subject: |
| GDM2 2.14.8 (stable), the "SecurityFix" Release |
| Date: |
| Wed, 07 Jun 2006 17:27:13 -0500 |
AOOH-GAH
--------
(If you have no clue what gdm is, skip a few paragraphs down first)
The 2.14.8 release is a stable release of GDM with the following
new features. Note this contains an important security fix, so
users and distros should update immediately.
- Correction for serious security issue where the user can enter the
GDM configuration GUI with a user password when the Face Browser
is enabled. Refer to bugzilla.gnome.org bug #343476 (Brian
Cameron) This issue impacts all versions of GDM 2.8.0.0-2.8.0.7,
2.14.0-2.14.7, and 2.15.0-2.15.3. This issue was reported to
vendor-sec one week ago and has ID #CVE-2006-2452.
- Fixed bug where when the "Include All" button is modified in the
Users tab, the Automatic/Timed login dropdown lists update
properly. (Brian Cameron)
- Now gdmflexiserver calls gdmcomm_check with FALSE so it will not
pop up a dialog. gdmflexiserver can be run with the --command
option which can be used when the user does not have permission to
a DISPLAY, so trying to show a dialog was causing gdmflexiserver
to core dump when the check failed. (Brian Cameron)
- Added gestures to the AccessKeyMouseEvents configuration file
so that users can access more accessibility features using
dwell gestures. (Brian Cameron)
- Translation updates (Laurent Dhima, Pema Geyleg, Theppitak
Karoonboonyanan, Gabor Kelemen, Ahmad Riza H Nst, Vincent
van Adrighem)
Note: GDM2 was originally written by Martin K. Petersen <mkp@mkp.net>.
Much work has been done on GDM2 by George Lebl, and Brian Cameron
currently shares maintainership duties with the Queen of England.
Note2: If installing from the tarball do note that make install
overwrites most of the setup files, all except gdm.conf. It will
however save backups with the .orig extension first.
#ifndef GDM_DISABLE_DEPRECATED
Note3: Note3 has been depracated ...
#endif /* GDM_DISABLE_DEPRECATED */
Downloading:
============
Online Documentation - http://www.gnome.org/projects/gdm/
Latest Stable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.14/
Latest Unstable - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.15/
No RPM this time around BTW. Have fun. A spec file is included though,
so you can try:
rpmbuild -ta gdm-whatever.tar.gz
Have fun,
Brian
_______________________________________________
gnome-announce-list mailing list
gnome-announce-list@gnome.org
http://mail.gnome.org/mailman/listinfo/gnome-announce-list
(
Log in to post comments)