GDM2 2.14.8 (stable), the "SecurityFix" Release




AOOH-GAH
--------

(If you have no clue what gdm is, skip a few paragraphs down first)

The 2.14.8 release is a stable release of GDM with the following
new features.  Note this contains an important security fix, so
users and distros should update immediately.

- Correction for serious security issue where the user can enter the
  GDM configuration GUI with a user password when the Face Browser
  is enabled.  Refer to bugzilla.gnome.org bug #343476 (Brian
  Cameron)  This issue impacts all versions of GDM 2.8.0.0-2.8.0.7,
  2.14.0-2.14.7, and 2.15.0-2.15.3.  This issue was reported to
  vendor-sec one week ago and has ID #CVE-2006-2452.

- Fixed bug where when the "Include All" button is modified in the
  Users tab, the Automatic/Timed login dropdown lists update
  properly.  (Brian Cameron)

- Now gdmflexiserver calls gdmcomm_check with FALSE so it will not
  pop up a dialog.  gdmflexiserver can be run with the --command
  option which can be used when the user does not have permission to
  a DISPLAY, so trying to show a dialog was causing gdmflexiserver
  to core dump when the check failed.   (Brian Cameron)

- Added gestures to the AccessKeyMouseEvents configuration file
  so that users can access more accessibility features using
  dwell gestures.  (Brian Cameron)

- Translation updates (Laurent Dhima, Pema Geyleg, Theppitak
  Karoonboonyanan, Gabor Kelemen, Ahmad Riza H Nst, Vincent
  van Adrighem)

Note:  GDM2 was originally written by Martin K. Petersen <mkp mkp net>.
Much work has been done on GDM2 by George Lebl, and Brian Cameron
currently shares maintainership duties with the Queen of England.

Note2:  If installing from the tarball do note that make install
overwrites most of the setup files, all except gdm.conf.  It will
however save backups with the .orig extension first.

#ifndef GDM_DISABLE_DEPRECATED
Note3:  Note3 has been depracated ...
#endif /* GDM_DISABLE_DEPRECATED */

Downloading:
============

Online Documentation - http://www.gnome.org/projects/gdm/
Latest Stable        - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.14/
Latest Unstable      - http://ftp.gnome.org/pub/GNOME/sources/gdm/2.15/

No RPM this time around BTW.  Have fun.  A spec file is included though,
so you can try:

  rpmbuild -ta gdm-whatever.tar.gz

Have fun,

Brian



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]