lightdm: leaks FDs to child processes

Related Vulnerabilities: CVE-2011-4105   CVE-2011-3153  

Debian Bug report logs - #658678
lightdm: leaks FDs to child processes

version graph

Reported by: Austin Clements <amdragon+debian@MIT.EDU>

Date: Sun, 5 Feb 2012 05:30:02 UTC

Severity: normal

Tags: security

Found in version lightdm/1.0.6-3

Fixed in versions lightdm/1.0.9-1, lightdm/1.2.0-1

Done: Yves-Alexis Perez <corsac@debian.org>

Bug is archived. No further changes may be made.

Forwarded to https://bugs.launchpad.net/lightdm/+bug/927060

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian Xfce Maintainers <pkg-xfce-devel@lists.alioth.debian.org>:
Bug#658678; Package lightdm. (Sun, 05 Feb 2012 05:30:05 GMT) (full text, mbox, link).


Acknowledgement sent to Austin Clements <amdragon+debian@MIT.EDU>:
New Bug report received and forwarded. Copy sent to Debian Xfce Maintainers <pkg-xfce-devel@lists.alioth.debian.org>. (Sun, 05 Feb 2012 05:30:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Austin Clements <amdragon+debian@MIT.EDU>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: lightdm: leaks FDs to child processes
Date: Sun, 05 Feb 2012 00:27:47 -0500
Package: lightdm
Version: 1.0.6-3
Severity: normal

Dear Maintainer,

lightdm appears to leak several file descriptors to the child process
it creates for the session, which propagate to nearly every process
running in an interactive session.

For example, running ls -l /proc/self/fd from a terminal in X yields

lrwx------ 1 amdragon amdragon 64 Feb  4 23:52 0 -> /dev/pts/15
lrwx------ 1 amdragon amdragon 64 Feb  4 23:52 1 -> /dev/pts/15
lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 13 -> pipe:[10098]
l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 14 -> pipe:[10098]
lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 15 -> pipe:[10099]
l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 16 -> pipe:[10099]
lrwx------ 1 amdragon amdragon 64 Feb  4 23:52 2 -> /dev/pts/15
lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 3 -> /proc/27874/fd/
lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 4 -> pipe:[9306]
l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 5 -> pipe:[9306]
l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 6 -> /var/log/lightdm/lightdm.log

FDs 4 through 16 were inherited from the lightdm process, as can be
seen from its open FDs,

$ sudo ls -l /proc/`pidof lightdm`/fd
total 0
lrwx------ 1 root root 64 Feb  4 23:54 0 -> /dev/null
lrwx------ 1 root root 64 Feb  4 23:54 1 -> /dev/null
lr-x------ 1 root root 64 Feb  4 23:54 10 -> pipe:[9315]
l-wx------ 1 root root 64 Feb  4 23:54 11 -> pipe:[9315]
lrwx------ 1 root root 64 Feb  4 23:54 12 -> socket:[10302]
lr-x------ 1 root root 64 Feb  4 23:54 13 -> pipe:[10098]
l-wx------ 1 root root 64 Feb  4 23:54 14 -> pipe:[10098]
lr-x------ 1 root root 64 Feb  4 23:54 15 -> pipe:[10099]
l-wx------ 1 root root 64 Feb  4 23:54 16 -> pipe:[10099]
lrwx------ 1 root root 64 Feb  4 23:54 17 -> socket:[10101]
lrwx------ 1 root root 64 Feb  4 23:54 2 -> /dev/null
lrwx------ 1 root root 64 Feb  4 23:54 3 -> anon_inode:[eventfd]
lr-x------ 1 root root 64 Feb  4 23:54 4 -> pipe:[9306]
l-wx------ 1 root root 64 Feb  4 23:54 5 -> pipe:[9306]
l-wx------ 1 root root 64 Feb  4 23:54 6 -> /var/log/lightdm/lightdm.log
lrwx------ 1 root root 64 Feb  4 23:54 7 -> anon_inode:[eventfd]
lrwx------ 1 root root 64 Feb  4 23:54 8 -> socket:[8076]
lrwx------ 1 root root 64 Feb  4 23:54 9 -> anon_inode:[eventfd]

FD 6 is particularly worrisome, as it allows any process to write to
the root-owned lightdm log.

It might be relevant that I use an .xsession script and Xmonad with no
desktop environment.

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.1.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages lightdm depends on:
ii  adduser                3.113
ii  consolekit             0.4.5-1
ii  dbus                   1.4.16-1
ii  debconf [debconf-2.0]  1.5.41
ii  libc6                  2.13-23
ii  libglib2.0-0           2.30.2-4
ii  libpam0g               1.1.3-6
ii  libxcb1                1.7-4
ii  libxdmcp6              1:1.1.0-4
ii  lightdm-gtk-greeter    1.0.6-3

Versions of packages lightdm recommends:
ii  xserver-xorg  1:7.6+10

Versions of packages lightdm suggests:
ii  accountsservice  0.6.15-2

-- debconf information:
  lightdm/daemon_name: /usr/sbin/lightdm
* shared/default-x-display-manager: lightdm




Information forwarded to debian-bugs-dist@lists.debian.org, Debian Xfce Maintainers <pkg-xfce-devel@lists.alioth.debian.org>:
Bug#658678; Package lightdm. (Sun, 05 Feb 2012 09:24:04 GMT) (full text, mbox, link).


Acknowledgement sent to Yves-Alexis Perez <corsac@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Xfce Maintainers <pkg-xfce-devel@lists.alioth.debian.org>. (Sun, 05 Feb 2012 09:24:07 GMT) (full text, mbox, link).


Message #10 received at 658678@bugs.debian.org (full text, mbox, reply):

From: Yves-Alexis Perez <corsac@debian.org>
To: Austin Clements <amdragon+debian@MIT.EDU>, 658678@bugs.debian.org
Cc: new@bugs.launchpad.net, control@bugs.debian.org
Subject: Re: [Pkg-xfce-devel] Bug#658678: lightdm: leaks FDs to child processes
Date: Sun, 05 Feb 2012 09:21:34 +0000
[Message part 1 (text/plain, inline)]
 affects lightdm
 affects debian
 security yes
 summary "lightdm leaks FDs to child processes"
 done

tag 658678 security
thanks
On dim., 2012-02-05 at 00:27 -0500, Austin Clements wrote:
> Package: lightdm
> Version: 1.0.6-3
> Severity: normal
> 
> Dear Maintainer,
> 
> lightdm appears to leak several file descriptors to the child process
> it creates for the session, which propagate to nearly every process
> running in an interactive session.
> 
> For example, running ls -l /proc/self/fd from a terminal in X yields
> 
> lrwx------ 1 amdragon amdragon 64 Feb  4 23:52 0 -> /dev/pts/15
> lrwx------ 1 amdragon amdragon 64 Feb  4 23:52 1 -> /dev/pts/15
> lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 13 -> pipe:[10098]
> l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 14 -> pipe:[10098]
> lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 15 -> pipe:[10099]
> l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 16 -> pipe:[10099]
> lrwx------ 1 amdragon amdragon 64 Feb  4 23:52 2 -> /dev/pts/15
> lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 3 -> /proc/27874/fd/
> lr-x------ 1 amdragon amdragon 64 Feb  4 23:52 4 -> pipe:[9306]
> l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 5 -> pipe:[9306]
> l-wx------ 1 amdragon amdragon 64 Feb  4 23:52 6
> -> /var/log/lightdm/lightdm.log
> 
> FDs 4 through 16 were inherited from the lightdm process, as can be
> seen from its open FDs,
> 
> $ sudo ls -l /proc/`pidof lightdm`/fd
> total 0
> lrwx------ 1 root root 64 Feb  4 23:54 0 -> /dev/null
> lrwx------ 1 root root 64 Feb  4 23:54 1 -> /dev/null
> lr-x------ 1 root root 64 Feb  4 23:54 10 -> pipe:[9315]
> l-wx------ 1 root root 64 Feb  4 23:54 11 -> pipe:[9315]
> lrwx------ 1 root root 64 Feb  4 23:54 12 -> socket:[10302]
> lr-x------ 1 root root 64 Feb  4 23:54 13 -> pipe:[10098]
> l-wx------ 1 root root 64 Feb  4 23:54 14 -> pipe:[10098]
> lr-x------ 1 root root 64 Feb  4 23:54 15 -> pipe:[10099]
> l-wx------ 1 root root 64 Feb  4 23:54 16 -> pipe:[10099]
> lrwx------ 1 root root 64 Feb  4 23:54 17 -> socket:[10101]
> lrwx------ 1 root root 64 Feb  4 23:54 2 -> /dev/null
> lrwx------ 1 root root 64 Feb  4 23:54 3 -> anon_inode:[eventfd]
> lr-x------ 1 root root 64 Feb  4 23:54 4 -> pipe:[9306]
> l-wx------ 1 root root 64 Feb  4 23:54 5 -> pipe:[9306]
> l-wx------ 1 root root 64 Feb  4 23:54 6
> -> /var/log/lightdm/lightdm.log
> lrwx------ 1 root root 64 Feb  4 23:54 7 -> anon_inode:[eventfd]
> lrwx------ 1 root root 64 Feb  4 23:54 8 -> socket:[8076]
> lrwx------ 1 root root 64 Feb  4 23:54 9 -> anon_inode:[eventfd]
> 
> FD 6 is particularly worrisome, as it allows any process to write to
> the root-owned lightdm log.
> 
> It might be relevant that I use an .xsession script and Xmonad with no
> desktop environment. 

Yep, you seem to be right. I don't inherit them in all my processes, but
indeed xfce4-session has them. Forwarding to upstream and tagging
security.

I'm not completely sure what are the security impact right now as I
don't exactly know what the relevant “shared” fd except the lightdm.log.
There's one where the pipe is opened by Xorg too but that might be
normal.

Regards,
-- 
Yves-Alexis
[signature.asc (application/pgp-signature, inline)]

Added tag(s) security. Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Sun, 05 Feb 2012 09:33:03 GMT) (full text, mbox, link).


Set Bug forwarded-to-address to 'https://bugs.launchpad.net/lightdm/+bug/927060'. Request was from Yves-Alexis Perez <corsac@debian.org> to control@bugs.debian.org. (Mon, 06 Feb 2012 10:36:37 GMT) (full text, mbox, link).


Reply sent to Yves-Alexis Perez <corsac@debian.org>:
You have taken responsibility. (Mon, 05 Mar 2012 07:06:12 GMT) (full text, mbox, link).


Notification sent to Austin Clements <amdragon+debian@MIT.EDU>:
Bug acknowledged by developer. (Mon, 05 Mar 2012 07:06:13 GMT) (full text, mbox, link).


Message #19 received at 658678-close@bugs.debian.org (full text, mbox, reply):

From: Yves-Alexis Perez <corsac@debian.org>
To: 658678-close@bugs.debian.org
Subject: Bug#658678: fixed in lightdm 1.0.9-1
Date: Mon, 05 Mar 2012 07:03:15 +0000
Source: lightdm
Source-Version: 1.0.9-1

We believe that the bug you reported is fixed in the latest version of
lightdm, which is due to be installed in the Debian FTP archive:

liblightdm-gobject-1-0_1.0.9-1_amd64.deb
  to main/l/lightdm/liblightdm-gobject-1-0_1.0.9-1_amd64.deb
liblightdm-gobject-dev_1.0.9-1_amd64.deb
  to main/l/lightdm/liblightdm-gobject-dev_1.0.9-1_amd64.deb
liblightdm-qt-1-0_1.0.9-1_amd64.deb
  to main/l/lightdm/liblightdm-qt-1-0_1.0.9-1_amd64.deb
liblightdm-qt-dev_1.0.9-1_amd64.deb
  to main/l/lightdm/liblightdm-qt-dev_1.0.9-1_amd64.deb
lightdm-gtk-greeter_1.0.9-1_amd64.deb
  to main/l/lightdm/lightdm-gtk-greeter_1.0.9-1_amd64.deb
lightdm-qt-greeter_1.0.9-1_amd64.deb
  to main/l/lightdm/lightdm-qt-greeter_1.0.9-1_amd64.deb
lightdm-vala_1.0.9-1_amd64.deb
  to main/l/lightdm/lightdm-vala_1.0.9-1_amd64.deb
lightdm_1.0.9-1.debian.tar.gz
  to main/l/lightdm/lightdm_1.0.9-1.debian.tar.gz
lightdm_1.0.9-1.dsc
  to main/l/lightdm/lightdm_1.0.9-1.dsc
lightdm_1.0.9-1_amd64.deb
  to main/l/lightdm/lightdm_1.0.9-1_amd64.deb
lightdm_1.0.9.orig.tar.gz
  to main/l/lightdm/lightdm_1.0.9.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 658678@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Yves-Alexis Perez <corsac@debian.org> (supplier of updated lightdm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 05 Mar 2012 07:48:53 +0100
Source: lightdm
Binary: lightdm lightdm-gtk-greeter lightdm-qt-greeter lightdm-vala liblightdm-gobject-1-0 liblightdm-qt-1-0 liblightdm-gobject-dev liblightdm-qt-dev
Architecture: source amd64
Version: 1.0.9-1
Distribution: unstable
Urgency: low
Maintainer: Debian Xfce Maintainers <pkg-xfce-devel@lists.alioth.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description: 
 liblightdm-gobject-1-0 - simple display manager (gobject library)
 liblightdm-gobject-dev - simple display manager (gobject development files)
 liblightdm-qt-1-0 - simple display manager (Qt library)
 liblightdm-qt-dev - simple display manager (Qt development files)
 lightdm    - simple display manager
 lightdm-gtk-greeter - simple display manager (GTK+ greeter)
 lightdm-qt-greeter - simple display manager (Qt greeter)
 lightdm-vala - simple display manager (Vala files)
Closes: 658678
Changes: 
 lightdm (1.0.9-1) unstable; urgency=low
 .
   * New upstream release.
     - don't leak fds to child processes.                        closes: #658678
   * debian/watch updated to track 1.0 branch.
   * debian/patches:
     - 07_CVE-2011-4105 removed, code not present anymore.
     - 08_CVE-2011-3153 dropped, included upstream.
Checksums-Sha1: 
 ee180f15dc0524d049418855716994462f5548c0 2685 lightdm_1.0.9-1.dsc
 bde8f846aa4b8013797d7a7b04f04d5130242f27 651067 lightdm_1.0.9.orig.tar.gz
 02f5a23893316de6fecc335667476ca9eb232680 33800 lightdm_1.0.9-1.debian.tar.gz
 9e25d3b7ee05e08ae409f6c138e3d482bd2e7980 125766 lightdm_1.0.9-1_amd64.deb
 6ed5fde11ce5a35fd4735a610c5159fe36b95f8a 30830 lightdm-gtk-greeter_1.0.9-1_amd64.deb
 69eb8cb638f3a94b6befe6a4cbb7a5e859d9ed7d 23518 lightdm-qt-greeter_1.0.9-1_amd64.deb
 2f222385a066f303e1a8855e396c3d142d375151 5762 lightdm-vala_1.0.9-1_amd64.deb
 11f0252845c9991332feea875c65abc8e2c790ad 30326 liblightdm-gobject-1-0_1.0.9-1_amd64.deb
 f23ea4afdcdfa9bb520362966fa3657abb425e8a 52254 liblightdm-qt-1-0_1.0.9-1_amd64.deb
 49972cd03331d31b988a412bf6047ea9bd5379b8 53248 liblightdm-gobject-dev_1.0.9-1_amd64.deb
 9d57c6eeea10937267176cc14bb46b509cb94fb2 64074 liblightdm-qt-dev_1.0.9-1_amd64.deb
Checksums-Sha256: 
 3894c63f1bd20f7d3871f0e461548fb6a344a3c32069b6874e75a58786516889 2685 lightdm_1.0.9-1.dsc
 d1ef9067be01672ea56083463415284bfc2ae2878442f95e71e3cfc1148dee5c 651067 lightdm_1.0.9.orig.tar.gz
 8ba187c8f0afbe7dcf39ac55f78a85dfd3082d946b44e18c09f5b08bf56593aa 33800 lightdm_1.0.9-1.debian.tar.gz
 44e5aabe71070ae04ff32606c25f1f3b50666a1abbc6b71d92bfe08e7f726424 125766 lightdm_1.0.9-1_amd64.deb
 b528225c1de25f63b482d9c39d4c0d80e0e42e955b5dca0869dc7ad1cc6d0970 30830 lightdm-gtk-greeter_1.0.9-1_amd64.deb
 8384d80ffd69a42716788a1021ae1b5f146fa74fa5e5df606992c23925d18cda 23518 lightdm-qt-greeter_1.0.9-1_amd64.deb
 afb199a63cc372bf517b57de7ce4efc56cbadc900413c4543d8023bef31f39ed 5762 lightdm-vala_1.0.9-1_amd64.deb
 01911d3341e22d62a116fd36d7f9f5fc0474fb91a386f5615a3924ee50295799 30326 liblightdm-gobject-1-0_1.0.9-1_amd64.deb
 f2a1b36d5a43c68ffdf755474c10ad5b52773ceb299007d45b0c6694e3dac9b3 52254 liblightdm-qt-1-0_1.0.9-1_amd64.deb
 7087db7f0ea98a9c7631820d2a4a92cb1a5a4a44bf07507d1481297c6be6d65a 53248 liblightdm-gobject-dev_1.0.9-1_amd64.deb
 fc06a139f3b557ffc7154153b7754f88395305aaae60c9a17b8a013891a0de12 64074 liblightdm-qt-dev_1.0.9-1_amd64.deb
Files: 
 d962f6da47438f9b59607683368289d5 2685 x11 optional lightdm_1.0.9-1.dsc
 e18bf008cdcdf9badc8f2d957ea71c47 651067 x11 optional lightdm_1.0.9.orig.tar.gz
 3dc2ef4fd0e6c5b7d07f9a24483ba014 33800 x11 optional lightdm_1.0.9-1.debian.tar.gz
 b723941a97e0d9cdd005a72cfe908b14 125766 x11 optional lightdm_1.0.9-1_amd64.deb
 c675179cb69479bcc8badf9678418bde 30830 x11 optional lightdm-gtk-greeter_1.0.9-1_amd64.deb
 c08b6f644e5db2c1187fa301a741d323 23518 x11 optional lightdm-qt-greeter_1.0.9-1_amd64.deb
 29b42cb411c071388f458ce3e8ace66d 5762 x11 optional lightdm-vala_1.0.9-1_amd64.deb
 c70b371d865899b3d193bb1e82dd133a 30326 libdevel optional liblightdm-gobject-1-0_1.0.9-1_amd64.deb
 1776047164b9b3d4ec36bca1cd4154c0 52254 libdevel optional liblightdm-qt-1-0_1.0.9-1_amd64.deb
 8885c135aff18a6fc701cf33bd6aafb5 53248 libdevel optional liblightdm-gobject-dev_1.0.9-1_amd64.deb
 8a0ee91e27a9c9577a39b5a11562e00c 64074 libdevel optional liblightdm-qt-dev_1.0.9-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=c1Eh
-----END PGP SIGNATURE-----





Added tag(s) pending. Request was from Anibal Monsalve Salazar <anibal@debian.org> to control@bugs.debian.org. (Fri, 06 Apr 2012 20:06:09 GMT) (full text, mbox, link).


Reply sent to Yves-Alexis Perez <corsac@debian.org>:
You have taken responsibility. (Fri, 06 Apr 2012 22:33:17 GMT) (full text, mbox, link).


Notification sent to Austin Clements <amdragon+debian@MIT.EDU>:
Bug acknowledged by developer. (Fri, 06 Apr 2012 22:33:17 GMT) (full text, mbox, link).


Message #26 received at 658678-close@bugs.debian.org (full text, mbox, reply):

From: Yves-Alexis Perez <corsac@debian.org>
To: 658678-close@bugs.debian.org
Subject: Bug#658678: fixed in lightdm 1.2.0-1
Date: Fri, 06 Apr 2012 22:32:28 +0000
Source: lightdm
Source-Version: 1.2.0-1

We believe that the bug you reported is fixed in the latest version of
lightdm, which is due to be installed in the Debian FTP archive:

liblightdm-gobject-1-0_1.2.0-1_amd64.deb
  to main/l/lightdm/liblightdm-gobject-1-0_1.2.0-1_amd64.deb
liblightdm-gobject-dev_1.2.0-1_amd64.deb
  to main/l/lightdm/liblightdm-gobject-dev_1.2.0-1_amd64.deb
liblightdm-qt-2-0_1.2.0-1_amd64.deb
  to main/l/lightdm/liblightdm-qt-2-0_1.2.0-1_amd64.deb
liblightdm-qt-dev_1.2.0-1_amd64.deb
  to main/l/lightdm/liblightdm-qt-dev_1.2.0-1_amd64.deb
lightdm-vala_1.2.0-1_amd64.deb
  to main/l/lightdm/lightdm-vala_1.2.0-1_amd64.deb
lightdm_1.2.0-1.debian.tar.gz
  to main/l/lightdm/lightdm_1.2.0-1.debian.tar.gz
lightdm_1.2.0-1.dsc
  to main/l/lightdm/lightdm_1.2.0-1.dsc
lightdm_1.2.0-1_amd64.deb
  to main/l/lightdm/lightdm_1.2.0-1_amd64.deb
lightdm_1.2.0.orig.tar.gz
  to main/l/lightdm/lightdm_1.2.0.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 658678@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Yves-Alexis Perez <corsac@debian.org> (supplier of updated lightdm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 06 Apr 2012 21:32:13 +0200
Source: lightdm
Binary: lightdm lightdm-vala liblightdm-gobject-1-0 liblightdm-qt-2-0 liblightdm-gobject-dev liblightdm-qt-dev
Architecture: source amd64
Version: 1.2.0-1
Distribution: experimental
Urgency: low
Maintainer: Debian Xfce Maintainers <pkg-xfce-devel@lists.alioth.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description: 
 liblightdm-gobject-1-0 - simple display manager (gobject library)
 liblightdm-gobject-dev - simple display manager (gobject development files)
 liblightdm-qt-2-0 - simple display manager (Qt library)
 liblightdm-qt-dev - simple display manager (Qt development files)
 lightdm    - simple display manager
 lightdm-vala - simple display manager (Vala files)
Closes: 650946 654343 658678 664805
Changes: 
 lightdm (1.2.0-1) experimental; urgency=low
 .
   [ Yves-Alexis Perez ]
   * New upstream release.
     - don't leak fds to child processes.                        closes: #658678
   * debian/po:
     - da.po updated, thanks to “Joe Dalton”.                    closes: #650946
   * debian/control:
     - add Provides: on x-display-manager.                       closes: #654343
     - liblightdm-gobject-dev requires libdbus-glib-1-dev and libxklavier-dev
       so add dependencies.
     - drop lightdm-{gtk,qt}-greeter packages since they have been moved to
       standalone packages.
     - rename lightdm-qt-1-0 package to -2-0 to follow soname bump.
     - drop dh-autoreconf build-dep.
     - fix liblightdm*-dev package not depending on the library package itself.
     - update standards version to 3.9.3.
   * debian/watch updated for new tarballs location.
   * debian/patches:
     - 01_set-default-path refreshed.
     - 02_default-config.patch refreshed
       + use lightdm-greeter as greeter name, which is provided as an
         alternative by the various greeters.
     - 04_default-gtk-greeter-config dropped since lightm-gtk-greeter has been
       moved to standalone package.
     - 06_move-progs-to-pkglibexecdir dropped, included upstream.
     - 07_CVE-2011-4105 dropped, code doesn't exist anymore.
     - 08_CVE-2011-3153 dropped, included upstream.
   * debian/rules:
     - don't install libsystem as it's only useful for tests.
     - drop autoreconf since we don't need it anymore.
   * debian/lightdm-{gtk,qt}-greeter.{config.install.templates,postinst,prerm}
     dropped.
   * debian/lightdm.pam:
      - add selinux lines, thanks Laurent Bigonville.            closes: #664805
 .
   [ Lionel Le Folgoc ]
   * debian/patches: add missing DEP3 headers.
Checksums-Sha1: 
 f7c31054fd7ec8c211ac415d4a81d8686b5e2cc3 2554 lightdm_1.2.0-1.dsc
 853736ec927eceedfcf2211744dda8bb0bb028a9 644000 lightdm_1.2.0.orig.tar.gz
 165d9f5fa45ad8f00c7e08103234e8deee968dab 32715 lightdm_1.2.0-1.debian.tar.gz
 5611490e8a6ee965778cad700e80e6409dad7dc6 128546 lightdm_1.2.0-1_amd64.deb
 0e9aba79b6fbc030d9a7f91cbcf52c4fedfe2858 6060 lightdm-vala_1.2.0-1_amd64.deb
 357d11272ed532479583126e89c71feb0210eeb9 32734 liblightdm-gobject-1-0_1.2.0-1_amd64.deb
 7f599584e2d7872addf8204a4ca0b38a38ee1ceb 33976 liblightdm-qt-2-0_1.2.0-1_amd64.deb
 5a08343d584ee0a39f63104946c605bdc82dc29b 56568 liblightdm-gobject-dev_1.2.0-1_amd64.deb
 b471dd99fb240cb783f815b083126b021aa86d7c 39524 liblightdm-qt-dev_1.2.0-1_amd64.deb
Checksums-Sha256: 
 8a88766c3f5b8abe824a45744adc43fd7a45ff30e0440d7cf5c1ff5072d905d4 2554 lightdm_1.2.0-1.dsc
 15fcf72926f400ff7ee597a069c328043822e26885328115ac16cc362a75fe73 644000 lightdm_1.2.0.orig.tar.gz
 678d0b7d2c44edce685d89c36f4fe6a96e57d6ab326c9ae49ab3e64db8ee51c9 32715 lightdm_1.2.0-1.debian.tar.gz
 1e831d211645fb022172f09dc5f1b8fc6797212e4bbb0b571fa4d43bc3a0b239 128546 lightdm_1.2.0-1_amd64.deb
 0349ff17c5d8b506fa52cb01886121b37fa165f5c7b6e351d99c8470488e8706 6060 lightdm-vala_1.2.0-1_amd64.deb
 a9f0f5f60d6ebc0d62b6f5f80fc6cee8f09feaeb16f8324e5c1846115e5dbc45 32734 liblightdm-gobject-1-0_1.2.0-1_amd64.deb
 54747f497977036ef1b53972f8f13054ba46a261a82f0ae1fce2b9a22403ea2e 33976 liblightdm-qt-2-0_1.2.0-1_amd64.deb
 1325eef6955f6b4cdedf3a481190287aa4081097538dba9f7fe63b0178e0c76a 56568 liblightdm-gobject-dev_1.2.0-1_amd64.deb
 9842116287d658c5e77107a22c436fea061bb3dbee6676ab07c988b8d8a2d1e3 39524 liblightdm-qt-dev_1.2.0-1_amd64.deb
Files: 
 0dc3faee4b1da3b04a21c8818234b8a4 2554 x11 optional lightdm_1.2.0-1.dsc
 cca1ffdb8277c65b6c28a3d5091dd7c4 644000 x11 optional lightdm_1.2.0.orig.tar.gz
 5cce444a31a4aae79d70076b03cb4545 32715 x11 optional lightdm_1.2.0-1.debian.tar.gz
 ddd8d345871eddb2de548c6e19077bfa 128546 x11 optional lightdm_1.2.0-1_amd64.deb
 fb197f5af75e8725a7286f1001c56123 6060 x11 optional lightdm-vala_1.2.0-1_amd64.deb
 6576e98092f4f7ceaf61a0058ec16e63 32734 libdevel optional liblightdm-gobject-1-0_1.2.0-1_amd64.deb
 48df7338b7234f01f4bf4f660caafba0 33976 libdevel optional liblightdm-qt-2-0_1.2.0-1_amd64.deb
 055c3f36f2dcde07318f2583dda6d104 56568 libdevel optional liblightdm-gobject-dev_1.2.0-1_amd64.deb
 82fb6f352b27e293ea4409e478f79ff7 39524 libdevel optional liblightdm-qt-dev_1.2.0-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=KczX
-----END PGP SIGNATURE-----





Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 05 May 2012 07:44:24 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 18:09:16 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.