Comment 3 for bug 835996

Revision history for this message
Martin Pitt (pitti) wrote :

lightdm (0.9.6-0ubuntu1) oneiric; urgency=low

  * New upstream release:
    - Only unlock displays if switched to from greeter
    - Make log file not system readable
    - Write ~/.Xauthority inside the session process so it cannot be hijacked
    - Set PAM_TTY and PAM_XDISPLAY when opening PAM session
    - Add VNC server support
    - Do not write ~/.dmrc and ~/.Xauthority as root. [CVE-2011-3349]
  * debian/patches/00upstream_unlock_fix.patch:
  * debian/patches/04_dont_write_files_as_root.patch:
    - Applied upstream