summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorGeorge Lebl <jirka@5z.com>2001-06-02 08:57:09 +0000
committerGeorge Lebl <jirka@src.gnome.org>2001-06-02 08:57:09 +0000
commitffe51c9e07b193a593e60af916c23007117bb374 (patch)
tree3fb8f246db04cdcd80e4488973d3795e42bb44e5 /NEWS
parentafc2ebcc91a29a05e94687e383d312e69a531d44 (diff)
downloadgdm-ffe51c9e07b193a593e60af916c23007117bb374.tar.gz
bump version
Sat Jun 02 01:58:15 2001 George Lebl <jirka@5z.com> * configure.in: bump version * auth.c, xdmcp.c, cookie.c: fix clobering of cookies with zeros, only reget hostname on local displays, correctly setup authentication for local xdmcp case. reset umask to sane gdm value after setting the use auth * gdm.c: cleanup, possible fd leak if there was a stale pid file * server.c: handle memory errors in cookie setup * slave.c: from xdm stole the idea of a bogus first client which apparently fixes some things. Also actually close initial display on xdmcp session end. Also make sure language is at least "C" if we can't find any other language * slave.c: SECURITY! when reinitializing the display for another go, first bake new cookies
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS39
1 files changed, 39 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index f25b2e89..0f6cbe22 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,44 @@
Ahh news...
+2.2.2.1 stuff:
+
+- SECURITY FIX! Rebake cookies before reinitializing the local X server.
+ Only local X servers are affected, this bug allowed an attacker to log in,
+ save his cookie, which would then be used for the user who logs in next.
+
+- Fix a race preventing users to log in sometimes
+
+- Ability to turn of failsafe and chooser sessions (Havoc)
+
+- Fix mit cookie usage to not clobber cookies containing zeros
+
+- Fix remote XDMCP authentication
+
+- Pinging for XDMCP sessions to detect if they're dead
+
+- Saving current gnome session is done from gdm (gnome-core HEAD no longer
+ saves it)
+
+- Don't change utmp from Pre/Post session scripts
+
+- PAM related fixes
+
+- Better handeling of X failiures
+
+- Nicer iconify button
+
+- gdmphotosetup permissions fixes
+
+- Always add POSIX/C locale setting to language menu
+
+- Nicer minimize button
+
+- Ignore .rpmorig files
+
+- Other fixes
+
+- Translations (Stanislav Visnovsky, Kjartan Maraas, me)
+
2.2.2 stuff:
- When X keeps crashing ask if we should run the X configuration