Hello community, here is the log from the commit of package lightdm for openSUSE:Factory checked in at 2012-03-06 13:39:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/lightdm (Old) and /work/SRC/openSUSE:Factory/.lightdm.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "lightdm", Maintainer is "" Changes: -------- --- /work/SRC/openSUSE:Factory/lightdm/lightdm.changes 2012-01-17 16:11:23.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.lightdm.new/lightdm.changes 2012-03-06 13:39:16.000000000 +0100 @@ -1,0 +2,15 @@ +Fri Mar 2 11:10:07 UTC 2012 - [email protected] + +- update to version 1.0.9 + - stop file descriptors leaking into the session processes + (bnc#745339, lp#927060, CVE-2012-1111) + - fix compilation against gthread + - change session directory once user permissions are set so it + works on NFS filesystems that don't allow root to access files + - fix object cleanup on exit + - fix lightdm --debug not working on newer GLib + - drop privileges when reading ~/.dmrc (CVE-2011-3153) + - fix crash calling lightdm_get_layout +- drop lightdm-CVE-2011-3153.patch which has been included upstream + +------------------------------------------------------------------- Old: ---- lightdm-1.0.6.tar.gz lightdm-CVE-2011-3153.patch New: ---- lightdm-1.0.9.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ lightdm.spec ++++++ --- /var/tmp/diff_new_pack.04u5b3/_old 2012-03-06 13:39:18.000000000 +0100 +++ /var/tmp/diff_new_pack.04u5b3/_new 2012-03-06 13:39:18.000000000 +0100 @@ -23,7 +23,7 @@ %define qt_lib lib%{qt_libname}-0 Name: lightdm -Version: 1.0.6 +Version: 1.0.9 Release: 0 Summary: Lightweight, Cross-desktop Display Manager License: GPL-3.0+ @@ -50,8 +50,6 @@ Patch7: lightdm-lock-screen-before-switch.patch # PATCH-FIX-UPSTREAM lightdm-remove-xauthority-ownership-fix.patch [email protected] -- Remove the code correcting the ownership of .Xauthority files, it is still not secure and the buggy LightDM version writing .Xauthority as root never was in a released openSUSE version anyway Patch8: lightdm-remove-xauthority-ownership-fix.patch -# PATCH-FIX-UPSTREAM lightdm-CVE-2011-3153.patch [email protected] -- fix vulnerability when reading .dmrc file -Patch9: lightdm-CVE-2011-3153.patch # PATCH-FIX-UPSTREAM lightdm-call-g_thread_init-conditionally.patch [email protected] -- call g_thread_init() only on glib < 2.31.0 Patch10: lightdm-call-g_thread_init-conditionally.patch BuildRequires: gcc-c++ @@ -180,7 +178,6 @@ %patch5 -p1 %patch7 -p1 %patch8 -p1 -%patch9 -p1 %patch10 -p1 rm -f liblightdm-qt/*_moc.cpp greeters/qt/*_moc.cpp tests/src/*_moc.cpp ++++++ lightdm-1.0.6.tar.gz -> lightdm-1.0.9.tar.gz ++++++ ++++ 8713 lines of diff (skipped) ++++++ lightdm-call-g_thread_init-conditionally.patch ++++++ --- /var/tmp/diff_new_pack.04u5b3/_old 2012-03-06 13:39:18.000000000 +0100 +++ /var/tmp/diff_new_pack.04u5b3/_new 2012-03-06 13:39:18.000000000 +0100 @@ -1,14 +1,14 @@ # HG changeset patch -# Parent e49002acbff3cb2ec011437ff6e402345ad1e78f +# Parent 16d3aef26fd2584bd9bd83c17e898339dfb59b32 call g_thread_init() only on glib < 2.31.0 diff --git a/src/lightdm.c b/src/lightdm.c --- a/src/lightdm.c +++ b/src/lightdm.c -@@ -1045,8 +1045,10 @@ main (int argc, char **argv) +@@ -1040,8 +1040,10 @@ main (int argc, char **argv) }; GError *error = NULL; - + + g_type_init (); +#if !GLIB_CHECK_VERSION (2,31,0) g_thread_init (NULL); ++++++ lightdm-set-gdmflexiserver-envvar.patch ++++++ --- /var/tmp/diff_new_pack.04u5b3/_old 2012-03-06 13:39:18.000000000 +0100 +++ /var/tmp/diff_new_pack.04u5b3/_new 2012-03-06 13:39:18.000000000 +0100 @@ -1,5 +1,5 @@ # HG changeset patch -# Parent ba843deea04ac9f614338045d71e362fd92127bc +# Parent aea22cc6a9e4a9e6becbefa3ae7945b5a74d7802 set the GDMFLEXISERVER environment variable for the gdmflexiserver wrapper diff --git a/src/session.c b/src/session.c @@ -13,7 +13,7 @@ session_set_env (session, "USERNAME", user_get_name (user)); // FIXME: Is this required? -@@ -455,7 +456,7 @@ session_run (Process *process) +@@ -458,7 +459,7 @@ session_run (Process *process) pam_session_setup (session->priv->authentication); set_env_from_authentication (session, session->priv->authentication); set_locale (session); ++++++ lightdm-sysconfig-support.patch ++++++ --- /var/tmp/diff_new_pack.04u5b3/_old 2012-03-06 13:39:18.000000000 +0100 +++ /var/tmp/diff_new_pack.04u5b3/_new 2012-03-06 13:39:18.000000000 +0100 @@ -51,7 +51,7 @@ diff --git a/src/display.c b/src/display.c --- a/src/display.c +++ b/src/display.c -@@ -887,7 +887,10 @@ static void +@@ -881,7 +881,10 @@ static void display_init (Display *display) { display->priv = G_TYPE_INSTANCE_GET_PRIVATE (display, DISPLAY_TYPE, DisplayPrivate); @@ -74,7 +74,7 @@ #include "display-manager.h" #include "xdmcp-server.h" #include "vnc-server.h" -@@ -61,6 +62,117 @@ typedef struct +@@ -60,6 +61,117 @@ typedef struct #define LIGHTDM_BUS_NAME "org.freedesktop.DisplayManager" @@ -190,9 +190,9 @@ +} + static void - log_cb (const gchar *log_domain, GLogLevelFlags log_level, - const gchar *message, gpointer data) -@@ -1139,6 +1251,9 @@ main (int argc, char **argv) + log_cb (const gchar *log_domain, GLogLevelFlags log_level, const gchar *message, gpointer data) + { +@@ -1134,6 +1246,9 @@ main (int argc, char **argv) g_mkdir_with_parents (dir, S_IRWXU | S_IXGRP | S_IXOTH); g_free (dir); -- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
