The following reply was made to PR pkg/31417; it has been noted by GNATS.

From: Geert Hendrickx <ghen@netbsd.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: PR/31417 CVS commit: [pkgsrc-2007Q3] pkgsrc/x11/gdm
Date: Mon, 22 Oct 2007 09:14:39 +0000 (UTC)

 Module Name:	pkgsrc
 Committed By:	ghen
 Date:		Mon Oct 22 09:14:39 UTC 2007
 
 Modified Files:
 	pkgsrc/x11/gdm [pkgsrc-2007Q3]: Makefile distinfo
 Added Files:
 	pkgsrc/x11/gdm/patches [pkgsrc-2007Q3]: patch-am patch-an
 
 Log Message:
 Pullup ticket 2200 - requested by hauke
 security fix for gdm
 
 - pkgsrc/x11/gdm/Makefile				1.133
 - pkgsrc/x11/gdm/distinfo				1.51
 - pkgsrc/x11/gdm/patches/patch-am			1.3
 - pkgsrc/x11/gdm/patches/patch-an			1.1
 
    Module Name:	pkgsrc
    Committed By:	hauke
    Date:		Thu Oct 11 09:35:11 UTC 2007
 
    Added Files:
 	   pkgsrc/x11/gdm/patches: patch-am patch-an
 
    Log Message:
    The code to verify user and password provided in
    daemon/verify-{crypt,shadow}.c prints out the user name in various
    places, where daemon/verify-pam.c code does not. Get out of sync with
    the login dialog, and you'll have your password logged.
 
    Adapt patches from the gdm 2.20 branch for
    (1) not logging the user name in any sy slog error messages
    (2) not localizing the log messages.
 
    Fixes PR 31417.
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.132 -r1.132.2.1 pkgsrc/x11/gdm/Makefile
 cvs rdiff -r1.50 -r1.50.2.1 pkgsrc/x11/gdm/distinfo
 cvs rdiff -r0 -r1.2.18.1 pkgsrc/x11/gdm/patches/patch-am
 cvs rdiff -r0 -r1.1.2.2 pkgsrc/x11/gdm/patches/patch-an
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.