GDM 3.0.3 and GDM 2.32.2



The 3.0.3 and 2.32.2 releases fix a security bug of the GNOME Display Manager
(GDM) program:

-CVE-2011-1709 - fix URI lockdown with glib 2.28 and greater

The bug means that in certain cases a user can bring up a web browser
in in the login screen,
running as the unprivileged "gdm" user.

Thanks go to Vincent Untz for fixing this issue.

All users who use GDM with glib 2.28 or greater are advised to upgrade
to this version.

Documentation & Downloading
===========================

Online Documentation - http://www.gnome.org/projects/gdm/
3.0.3 - http://ftp.gnome.org/pub/GNOME/sources/gdm/3.0/gdm-3.0.3.tar.bz2
2.32.2 - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.32/gdm-2.32.2.tar.bz2
Bug Reporting        - http://bugzilla.gnome.org in the "gdm" category.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]