Package "gdm3"

  gdm3 (3.28.3-0ubuntu18.04.6) bionic-security; urgency=medium

  * SECURITY UPDATE: gnome-initial-setup launch issue
    - debian/patches/CVE-2020-16125.patch: fail if accountsservice could
      not be contacted in daemon/gdm-display.c.
    - CVE-2020-16125

 -- Marc Deslauriers <email address hidden> Tue, 27 Oct 2020 11:09:55 -0400

  gdm3 (3.28.3-0ubuntu18.04.4) bionic-security; urgency=medium

  * SECURITY UPDATE: Access to the logged-in user's session
    - debian/patches/CVE-2019-3825-*.patch: fix in
      daemon/gdm-manager.c, daemon/gdm-session.c.
    - CVE-2019-3825

 -- <email address hidden> (Leonidas S. Barbosa) Tue, 19 Feb 2019 05:33:26 -0300

  gdm3 (3.28.3-0ubuntu18.04.3) bionic; urgency=medium

  [ Bin Li ]
  * Add utils-add-new-gdm-disable-wayland-binary.patch, cherry-picked
    from cosmic. (LP: #1780076)

 -- Bin Li <email address hidden> Tue, 09 Oct 2018 09:42:42 +0100

  gdm3 (3.28.3-0ubuntu18.04.1) bionic; urgency=medium

  [ Iain Lane ]
  * New upstream release 3.28.3 (LP: #1786933):
    - CVE-2018-14424 - double free fix
      + 0001-display-store-Pass-the-display-object-rather-than-th.patch: Drop.
    - lifecycle fixes to libgdm/GdmClient
    - follow up fixes dealing with login screen reaping form last release
    - allow pam modules to use SIGUSR1 (LP: #1782152)
    - set PWD for user session
    - tell cirrus not to use wayland
  * Drop backported patches included in this release:
    - libgdm-drop-support-for-serializing-multiple-opens.patch
    - libgdm-fix-pointer-boolean-task-confusion.patch
    - libgdm-don-t-keep-manager-proxy-around-longer-than-we-nee.patch
    - libgdm-use-g_object_unref-instead-of-g_clear_object-for-w.patch
    - libgdm-get-connection-explicitly.patch
    - libgdm-Drop-weak-refs-on-the-GDBusConnection.patch
    - libgdm-Unref-the-manager-propagated-from-task.patch
    - libgdm-Don-t-double-ref-the-connection-got-from-task.patch
    - libgdm-Don-t-leak-connection-on-sync-re-authentication.patch
    - libgdm-Use-auto-pointers-and-cleanup-code.patch
    - libgdb-Try-to-reuse-connections-from-the-available-proxie.patch
    - libgdm-Don-t-save-manager-address.patch
    - libgdm-Return-NULL-on-invalid-client-instances.patch
    - daemon-gdm-session-record.c-open-close-the-utmp-database.patch

  [ Alberto Milone ]
  * ubuntu_nvidia_prime.patch:
    - Run scripts for Prime before and after Gdm sessions (LP: #1778011).

 -- Iain Lane <email address hidden> Fri, 17 Aug 2018 16:53:31 +0100

  gdm3 (3.28.2-0ubuntu1.4) bionic-security; urgency=medium

  * SECURITY UPDATE: Use-after-free of disposed transient displays
    - d/p/0001-display-store-Pass-the-display-object-rather-than-th.patch:
      display-store: Pass the display object rather than the id in the removed
      signal
    - CVE-2018-14424

 -- Chris Coulson <email address hidden> Wed, 01 Aug 2018 15:11:08 +0100