[gdm-list] [security CVE-2006-6105] GDM2 2.14.11 (stable), the "securityfix" Release

[Brian Cameron <Brian Cameron Sun COM>]

AOOH-GAH
--------

(If you have no clue what gdm is, skip a few paragraphs down first)

The 2.14.11 release is a stable release of GDM with the following
new features.  Note that this fixes the important security issue
listed below, so it is highly recommended to upgrade to the latest
2.8, 2.14, 2.16, or 2.17 version of GDM to address this issue.

- Fix for a recently reported security issue that has ID
  CVE-2006-6105.  This fixes a problem where a user can
  enter strings like "%08x" into the gdmchooser "Add"j
  host button and print out memory.  This issue was introduced
  into GDM 2.8.0.4.  (Brian Cameron)

- Set authdir to NULL after freeing to avoid accessing an invalid
  pointer.  Fixes bug #359831.  (Amnon Aaronsohn)

- Fix custom lists so that focus does not ever leave the
  username/password entry field.  (Brian Cameron)

- Remove calls to syslog/malloc that are called from inside signal
  handlers, since they are not safe.  (Ray Strode)

- The configure script now supports the Xserver installed in
  /usr/bin/Xorg.  (Ray Strode)

- Fix error message that gets printed when you run GDM
  as non-root user. (Brian Cameron)

Note:  GDM2 was originally written by Martin K. Petersen <mkp mkp net>.
Much work has been done on GDM2 by George Lebl, and Brian Cameron
currently shares maintainership duties with the Queen of England.

Note2:  If installing from the tarball do note that make install
overwrites most of the setup files, all except gdm.conf.  It will
however save backups with the .orig extension first.

#ifndef GDM_DISABLE_DEPRECATED
Note3:  Note3 has been depracated ...
#endif /* GDM_DISABLE_DEPRECATED */

Downloading:
============

Online Documentation - http://www.gnome.org/projects/gdm/
Latest Stable        - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.16/
Latest Unstable      - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.17/

No RPM this time around BTW.  Have fun.  A spec file is included though,
so you can try:

  rpmbuild -ta gdm-whatever.tar.gz

Have fun,

Brian