Hello community, here is the log from the commit of package gdm checked in at Thu Dec 14 01:55:44 CET 2006. -------- --- GNOME/gdm/gdm.changes 2006-11-30 19:14:22.000000000 +0100 +++ /mounts/work_src_done/STABLE/gdm/gdm.changes 2006-12-12 14:30:23.000000000 +0100 @@ -1,0 +2,11 @@ +Tue Dec 12 14:29:39 CET 2006 - sbrabec@suse.cz + +- Fixed SuSEconfig typo in XDMCP Enable (#221350). + +------------------------------------------------------------------- +Mon Dec 11 18:15:07 CET 2006 - maw@suse.de + +- Add gdm-bufferoverrun.patch, fixing a format string exploit + (#226360). + +------------------------------------------------------------------- New: ---- gdm-bufferoverrun.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gdm.spec ++++++ --- /var/tmp/diff_new_pack.PCqLjL/_old 2006-12-14 01:55:28.000000000 +0100 +++ /var/tmp/diff_new_pack.PCqLjL/_new 2006-12-14 01:55:28.000000000 +0100 @@ -22,7 +22,7 @@ Group: System/GUI/GNOME Autoreqprov: on Version: 2.16.1 -Release: 36 +Release: 39 Summary: The GNOME 2.x Display Manager Source: %{name}-%{version}.tar.bz2 Source1: gdm.pamd @@ -50,6 +50,7 @@ Patch28: gdm-X_SERVER.patch Patch29: gdm-gdmsetup.patch Patch30: gdm-conf-custom-sysconfig.patch +Patch31: gdm-bufferoverrun.patch URL: http://www.gnome.org/ BuildRoot: %{_tmppath}/%{name}-%{version}-build Docdir: %{_defaultdocdir} @@ -96,6 +97,7 @@ %patch28 %patch29 %patch30 +%patch31 -p1 gnome-patch-translation-update %build @@ -173,7 +175,7 @@ %pre # Remove old logs (#56205). rm -f var/lib/gdm/*.log* -# Remove old gdm_sysconfig.conf to update gdm.conf from sysconfig settings. +# Remove old gdm_sysconfig.conf to update custom.conf from sysconfig settings. rm -f etc/opt/gnome/gdm/gdm_sysconfig.conf /usr/sbin/groupadd -r gdm 2> /dev/null || : /usr/sbin/useradd -r -o -g gdm -s /bin/false \ @@ -230,6 +232,11 @@ %dir /usr/share/xsessions %changelog -n gdm +* Tue Dec 12 2006 - sbrabec@suse.cz +- Fixed SuSEconfig typo in XDMCP Enable (#221350). +* Mon Dec 11 2006 - maw@suse.de +- Add gdm-bufferoverrun.patch, fixing a format string exploit + (#226360). * Thu Nov 30 2006 - jhargadon@suse.de - removed unneeded files from the package (#223687) * Tue Nov 21 2006 - jpr@suse.de ++++++ SuSEconfig.gdm ++++++ --- GNOME/gdm/SuSEconfig.gdm 2006-10-31 16:51:11.000000000 +0100 +++ /mounts/work_src_done/STABLE/gdm/SuSEconfig.gdm 2006-12-12 14:29:08.000000000 +0100 @@ -78,7 +78,7 @@ export comment_$2="displaymanager:$1" } -sysconfig_yesno_to_gdm DISPLAYMANAGER_REMOTE_ACCESS xdmcp_enable +sysconfig_yesno_to_gdm DISPLAYMANAGER_REMOTE_ACCESS xdmcp_Enable sysconfig_yesno_to_gdm DISPLAYMANAGER_ROOT_LOGIN_REMOTE security_AllowRemoteRoot @@ -219,6 +219,7 @@ print "# SuSEconfig: "ENVIRON["comment_"section"_"item]; print item"="gdm_conf_var[section"_"item]; if (ENVIRON["GDM_IS_RUNNING"] == "true") + # FIXME: If gdm is running and no session is active, command is executed too early. system("$r/opt/gnome/bin/gdmflexiserver --command=\"UPDATE_CONFIG "section"/"item"\"") return "DONE"; } else @@ -243,13 +244,23 @@ gdm_prepare_var("daemon_AutomaticLogin"); gdm_prepare_var("security_AllowRemoteRoot"); gdm_prepare_var("security_DisallowTCP"); - gdm_prepare_var("xdmcp_enable"); + gdm_prepare_var("xdmcp_Enable"); gdm_prepare_var("greeter_AllowShutdown"); gdm_prepare_var("greeter_SecureShutdown"); gdm_prepare_var("greeter_ShowDomain"); gdm_prepare_var("servers_0"); } +# Remove invalid entry created by SuSEconfig.gdm in SuSE Linux 10.2. +/^enable=/ { + if (section == "xdmcp") { +# Remove old gdm_sysconfig.conf to force update of custom.conf. + system("rm -f $r/etc/opt/gnome/gdm/gdm_sysconfig.conf"); + process_unseen(); + next; + } +} + /^# SuSEconfig:/ { process_unseen(); next; ++++++ gdm-bufferoverrun.patch ++++++ --- gdm-2.17.3/vicious-extensions/ve-miscui.c-orig 2006-12-05 16:28:27.460459000 -0600 +++ gdm-2.17.3/vicious-extensions/ve-miscui.c 2006-12-05 16:28:38.677749000 -0600 @@ -76,10 +76,10 @@ ve_hig_dialog_new (GtkWindow *paren GTK_DIALOG_DESTROY_WITH_PARENT, type, buttons, - primary_message); + "%s", primary_message); gtk_message_dialog_format_secondary_text (GTK_MESSAGE_DIALOG (dialog), - secondary_message); + "%s", secondary_message); gtk_window_set_title (GTK_WINDOW (dialog), ""); gtk_container_set_border_width (GTK_CONTAINER (dialog), 5); ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org