Subject: CVS commit: pkgsrc/x11/gdm
To: None <pkgsrc-changes@NetBSD.org>
From: Thomas Klausner <wiz@netbsd.org>
List: pkgsrc-changes
Date: 12/19/2006 17:54:45
Module Name:	pkgsrc
Committed By:	wiz
Date:		Tue Dec 19 17:54:45 UTC 2006

Modified Files:
	pkgsrc/x11/gdm: Makefile distinfo

Log Message:
Security update to 2.16.4:

2.16.4 Stuff:

- Fix for a recently reported security issue that has ID
  CVE-2006-6105.  This fixes a problem where a user can
  enter strings like "%08x" into the gdmchooser "Add"j
  host button and print out memory.  (Brian Cameron)

- Fix for TryExec check in gdmsession to make sure that any
  arguments are not passed to g_find_program_in_path since
  this causes the function to say it is not executable.
  (Brian Cameron)

- Translation updates (Runa Bhattacharjee, Josep Puigdemont
  i Casamaj\303\263, Laurent Dhima, I. Felix, David Lodge,
  Ani Peter, Rajesh Ranjan, Clytie Siddall, Vincent van
  Adrighem)

2.16.3 Stuff:

- Now support altfile[n] propery to cater for alternative
  image file definition.  (Erwann Chenede)

- Fix custom lists so that focus does not ever leave the
  username/password entry field.  (Brian Cameron)

- Update to make casting more clear in PAM logic.  This fixes a
  bug where the Kerberos PAM module was sending multiple error
  messages and GDM was not processing them properly.
  (Brian Cameron)

- Add X_EXTRA_LIBS and X_LIBS to utils/Makefile when building
  gdm-dmx-reconnect-proxy to fix bug #368808.  (Brian Cameron)

- Translation updates (Djihed Afifi, Wouter Bolsterlee, Luca
  Ferretti, Pema Geyleg, Priit Laes, Duarte Loreto, Christophe
  Merlet, Jovan Naumovski, Daniel Nylander, Ankit Patel, Ignacio
  Casal Quinteiro, Satoru SATOH, Francisco Javier F. Serrador,
  Alexander Shopov, Ilkka Tuohela)

2.16.2 Stuff:

- Now support for "combo" style lists, and id values of "session"
  and "language" are supported for displaying the session/language
  lists as drop-down combos.  (Brian Cameron).  For example:

  <item type="list" id="language" combo="true">
     <pos  x="25" y="10" height="40" width="300"/>
  </item>
  <item type="list" id="session" combo="true">
    <pos x="50" y="10" height="40" width="300"/>
  </item>

- Now OK/Start Again buttons are sensitive/insensitive in a more
  sensible way for both gdmlogin and gdmgreeter (if GTK style buttons
  are used in gdmgreeter).  (Brian Cameron)

- Face Browser widget and background rectangle (for gdmgreeter)
  is not shown if there are no users to display.  (Brian Cameron)

- Help button now enabled in gdmphotosetup.  (Matthias Clasen)

- Fix so that if timed user script returns an invalid user that
  timed login is not turned on.  (Andrew)

- Fix bug that was causing %t to be expanded improperly when
  used in the timed login label.  (Brian Cameron)

- Set authdir to NULL after freeing to avoid accessing an invalid
  pointer.  Fixes bug #359831.  (Amnon Aaronsohn)

- Leaks fixed.  (Kjartan Maraas)

- Translation updates (Abel Cheung, Priit Laes, Daniel Nylander)


To generate a diff of this commit:
cvs rdiff -r1.121 -r1.122 pkgsrc/x11/gdm/Makefile
cvs rdiff -r1.45 -r1.46 pkgsrc/x11/gdm/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.