[SECURITY] Fedora 18 Update: lightdm-1.4.3-1.fc18

updates at fedoraproject.org updates at fedoraproject.org
Thu Sep 26 06:17:05 UTC 2013


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-16381
2013-09-11 00:37:26
--------------------------------------------------------------------------------

Name        : lightdm
Product     : Fedora 18
Version     : 1.4.3
Release     : 1.fc18
URL         : https://launchpad.net/lightdm/
Summary     : Lightweight Display Manager
Description :
LightDM is an X display manager that:
* Has a lightweight codebase
* Is standards compliant (PAM, ConsoleKit, etc)
* Has a well defined interface between the server and user interface
* Fully themeable (easiest with the webkit interface)
* Cross-desktop (greeters can be written in any toolkit)

--------------------------------------------------------------------------------
Update Information:

This is a stable update in the 1.4 series adding a few important fixes backported from later versions.

Overview of changes in lightdm 1.4.2 include:
* Correctly set permissions on Xauthority file.
* Stop using g_file_set_replace - it can leave intermediate files around

See also: 
http://lists.freedesktop.org/archives/lightdm/2013-September/000438.html
http://lists.freedesktop.org/archives/lightdm/2013-September/000446.html
--------------------------------------------------------------------------------
ChangeLog:

* Thu Sep 12 2013 Rex Dieter <rdieter at fedoraproject.org> 
- 1.4.3-1
- lightdm-1.4.3
- Word-readable .Xauthority (#1007187, CVE-2013-4331)
* Fri Sep  6 2013 Rex Dieter <rdieter at fedoraproject.org> 1.4.2-1
- lightdm-1.4.2
* Sun Apr 14 2013 Rex Dieter <rdieter at fedoraproject.org> 1.4.1-3
- lightdm does not honor UID_MIN from /etc/login.defs (#907312)
* Sun Apr 14 2013 Rex Dieter <rdieter at fedoraproject.org> 1.4.1-2
- No login key is writen in Mate-Desktop (#896130)
* Wed Mar 27 2013 Rex Dieter <rdieter at fedoraproject.org> 1.4.1-1
- lightdm-1.4.1
- lightdm.conf: +xserver-command=X -background none
* Thu Jan 10 2013 Rex Dieter <rdieter at fedoraproject.org> 1.4.0-5
- polish systemd-login1 power support patch
* Tue Jan  8 2013 Rex Dieter <rdieter at fedoraproject.org> 1.4.0-4
- omit upstart/init support from packaging (#892157)
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1007187 - lightdm: lightdm : Word-readable .Xauthority : [fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1007187
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update lightdm' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------


More information about the package-announce mailing list