[pkgsrc/trunk]: pkgsrc/x11/gdm Security update to 2.16.4:

[wiz <wiz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/6f98fd8bc3ae
branches:  trunk
changeset: 522728:6f98fd8bc3ae
user:      wiz <wiz%pkgsrc.org@localhost>
date:      Tue Dec 19 17:54:45 2006 +0000

description:
Security update to 2.16.4:

2.16.4 Stuff:

- Fix for a recently reported security issue that has ID
  CVE-2006-6105.  This fixes a problem where a user can
  enter strings like "%08x" into the gdmchooser "Add"j
  host button and print out memory.  (Brian Cameron)

- Fix for TryExec check in gdmsession to make sure that any
  arguments are not passed to g_find_program_in_path since
  this causes the function to say it is not executable.
  (Brian Cameron)

- Translation updates (Runa Bhattacharjee, Josep Puigdemont
  i Casamaj\303\263, Laurent Dhima, I. Felix, David Lodge,
  Ani Peter, Rajesh Ranjan, Clytie Siddall, Vincent van
  Adrighem)

2.16.3 Stuff:

- Now support altfile[n] propery to cater for alternative
  image file definition.  (Erwann Chenede)

- Fix custom lists so that focus does not ever leave the
  username/password entry field.  (Brian Cameron)

- Update to make casting more clear in PAM logic.  This fixes a
  bug where the Kerberos PAM module was sending multiple error
  messages and GDM was not processing them properly.
  (Brian Cameron)

- Add X_EXTRA_LIBS and X_LIBS to utils/Makefile when building
  gdm-dmx-reconnect-proxy to fix bug #368808.  (Brian Cameron)

- Translation updates (Djihed Afifi, Wouter Bolsterlee, Luca
  Ferretti, Pema Geyleg, Priit Laes, Duarte Loreto, Christophe
  Merlet, Jovan Naumovski, Daniel Nylander, Ankit Patel, Ignacio
  Casal Quinteiro, Satoru SATOH, Francisco Javier F. Serrador,
  Alexander Shopov, Ilkka Tuohela)

2.16.2 Stuff:

- Now support for "combo" style lists, and id values of "session"
  and "language" are supported for displaying the session/language
  lists as drop-down combos.  (Brian Cameron).  For example:

  <item type="list" id="language" combo="true">
     <pos  x="25" y="10" height="40" width="300"/>
  </item>
  <item type="list" id="session" combo="true">
    <pos x="50" y="10" height="40" width="300"/>
  </item>

- Now OK/Start Again buttons are sensitive/insensitive in a more
  sensible way for both gdmlogin and gdmgreeter (if GTK style buttons
  are used in gdmgreeter).  (Brian Cameron)

- Face Browser widget and background rectangle (for gdmgreeter)
  is not shown if there are no users to display.  (Brian Cameron)

- Help button now enabled in gdmphotosetup.  (Matthias Clasen)

- Fix so that if timed user script returns an invalid user that
  timed login is not turned on.  (Andrew)

- Fix bug that was causing %t to be expanded improperly when
  used in the timed login label.  (Brian Cameron)

- Set authdir to NULL after freeing to avoid accessing an invalid
  pointer.  Fixes bug #359831.  (Amnon Aaronsohn)

- Leaks fixed.  (Kjartan Maraas)

- Translation updates (Abel Cheung, Priit Laes, Daniel Nylander)

diffstat:

 x11/gdm/Makefile |  4 ++--
 x11/gdm/distinfo |  8 ++++----
 2 files changed, 6 insertions(+), 6 deletions(-)

diffs (29 lines):

diff -r 043f60db8a9f -r 6f98fd8bc3ae x11/gdm/Makefile
--- a/x11/gdm/Makefile  Tue Dec 19 17:36:00 2006 +0000
+++ b/x11/gdm/Makefile  Tue Dec 19 17:54:45 2006 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.121 2006/10/30 21:44:28 drochner Exp $
+# $NetBSD: Makefile,v 1.122 2006/12/19 17:54:45 wiz Exp $
 #
 
-DISTNAME=      gdm-2.16.1
+DISTNAME=      gdm-2.16.4
 CATEGORIES=    x11 gnome
 MASTER_SITES=  ${MASTER_SITE_GNOME:=sources/gdm/2.16/}
 EXTRACT_SUFX=  .tar.bz2
diff -r 043f60db8a9f -r 6f98fd8bc3ae x11/gdm/distinfo
--- a/x11/gdm/distinfo  Tue Dec 19 17:36:00 2006 +0000
+++ b/x11/gdm/distinfo  Tue Dec 19 17:54:45 2006 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.45 2006/10/30 21:44:28 drochner Exp $
+$NetBSD: distinfo,v 1.46 2006/12/19 17:54:45 wiz Exp $
 
-SHA1 (gdm-2.16.1.tar.bz2) = 2a684d194cea825a6fc14be551d7d33e373ef55c
-RMD160 (gdm-2.16.1.tar.bz2) = 2aa56bf08be354778b9f0c55cbd441b2a354ac2f
-Size (gdm-2.16.1.tar.bz2) = 3130299 bytes
+SHA1 (gdm-2.16.4.tar.bz2) = 61c9c2f5a29c99aaa85d2b76164540b949b2656b
+RMD160 (gdm-2.16.4.tar.bz2) = afccb19cb0e56af9a464fa538de4f59191705142
+Size (gdm-2.16.4.tar.bz2) = 3139838 bytes
 SHA1 (patch-aa) = fa8fa6ca6b5d984b170454a7832f6faa3966a95d
 SHA1 (patch-ab) = b151843608e3418962dfcbfd454cf0ba8aac39e0
 SHA1 (patch-ac) = 69b3539e50af0b32207b9ffeb7cb01645c9ece3c