UbuntuUpdates.org

Package "gnome-keyring"

Name: gnome-keyring

Description:

GNOME keyring services (daemon and tools)
Latest version: 3.10.1-1ubuntu4.4
Release: trusty (14.04)
Level: updates
Repository: main
Homepage: https://wiki.gnome.org/GnomeKeyring

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "gnome-keyring"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "gnome-keyring" in Trusty

Repository Area Version
base main 3.10.1-1ubuntu4
security main 3.10.1-1ubuntu4.4

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 3.10.1-1ubuntu4.4 2019-02-26 19:07:20 UTC

  gnome-keyring (3.10.1-1ubuntu4.4) trusty-security; urgency=medium

  * SECURITY UPDATE: credentials exposed in memory (LP: #1772919)
    - debian/patches/CVE-2018-20781.patch: destroy the password in
      pam_sm_open_session in pam/gkr-pam-module.c.
    - CVE-2018-20781

 -- Marc Deslauriers <email address hidden> Thu, 14 Feb 2019 08:32:24 -0500
Source diff to previous version
1772919 pam-gnome-keyring.so reveals user\u2019s password credential as a plaintext form
CVE-2018-20781 In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This

Version: 3.10.1-1ubuntu4.3 2016-08-22 13:06:33 UTC

  gnome-keyring (3.10.1-1ubuntu4.3) trusty; urgency=medium

  * Use upstream gnome-keyring-daemon man page instead of stub Debian
    version (LP: #1421955)

 -- Jeremy Bicha <email address hidden> Sat, 06 Aug 2016 22:43:35 -0400
Source diff to previous version
1421955 gnome-keyring-daemon lacks a man page

Version: 3.10.1-1ubuntu4.2 2015-02-09 05:06:18 UTC

  gnome-keyring (3.10.1-1ubuntu4.2) trusty; urgency=medium

  * Backport changes in user session gnome-keyring jobs up to
    3.14.0-1ubuntu2. (LP: #1387303)
  * Enable gnome-keyring ssh and gpg daemons to appear in "Startup
    Applications".
  * Split gnome-keyring user session job into ssh, gpg, and keyring jobs.
  * Make sure ssh/gpg keyring jobs only start, if not disabled in gui or
    with usptart override.
  * This thus allows to use stock ssh/gpg agents as provided by respective
    upstreams.
 -- Dimitri John Ledkov <email address hidden> Fri, 23 Jan 2015 18:45:16 +0000
Source diff to previous version
1387303 regression: gnome-keyring components can't be disabled anymore

Version: 3.10.1-1ubuntu4.1 2014-10-28 15:06:41 UTC

  gnome-keyring (3.10.1-1ubuntu4.1) trusty; urgency=medium

  * debian/gnome-keyring.conf: upstart user-session job to re-export
    gnome-keyring agent's sockets into the desktop environment. (LP:
    #1271591)
 -- Dimitri John Ledkov <email address hidden> Mon, 13 Oct 2014 10:35:26 +0100


About   -   Send Feedback to @ubuntu_updates