UbuntuUpdates.org

Package "accountsservice"

Name: accountsservice

Description:

query and manipulate user account information
Latest version: 0.6.40-2ubuntu11.6
Release: xenial (16.04)
Level: updates
Repository: main
Homepage: http://www.freedesktop.org/wiki/Software/AccountsService/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "accountsservice"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "accountsservice" in Xenial

Repository Area Version
base main 0.6.40-2ubuntu10
security main 0.6.40-2ubuntu11.6

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 0.6.40-2ubuntu11.6 2020-11-03 17:06:52 UTC

  accountsservice (0.6.40-2ubuntu11.6) xenial-security; urgency=medium

  * SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
    (LP: #1900255)
    - debian/patches/0010-set-language.patch: updated to not drop real uid
      and real gid in user_drop_privileges_to_user.
    - debian/patches/0009-language-tools.patch: updated to not reset
      effective uid.
    - CVE-2020-16126
  * SECURITY UPDATE: directory traversal issue
    - debian/patches/CVE-2018-14036.patch: fix insufficient path prefix
      check in src/user.c.
    - CVE-2018-14036

 -- Marc Deslauriers <email address hidden> Mon, 02 Nov 2020 12:10:06 -0500
Source diff to previous version
CVE-2020-16126 RESERVED
CVE-2018-14036 Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authori

Version: 0.6.40-2ubuntu11.3 2016-11-10 22:06:41 UTC

  accountsservice (0.6.40-2ubuntu11.3) xenial; urgency=medium

  * debian/patches/wtmp-fix-logout.patch:
    - Backport 0.6.43 commit to fix logout records when a user
      shuts down or restarts their computer (LP: #1443052)

 -- Nikita Yerenkov-Scott <email address hidden> Tue, 25 Oct 2016 16:15:26 +0100
Source diff to previous version
1443052 User accounts login history showing incorrect history - patch

Version: 0.6.40-2ubuntu11.2 2016-09-08 18:06:33 UTC

  accountsservice (0.6.40-2ubuntu11.2) xenial; urgency=medium

  * debian/patches/0014-libsystemd.patch:
    - Backport patch to adapt to systemd 209, fixes missing "Switch User"
      functionality in GNOME Shell (LP: #1577049)
  * debian/control:
    - Bump minimum systemd for above patch

 -- Jeremy Bicha <email address hidden> Thu, 25 Aug 2016 21:27:44 -0400
Source diff to previous version
1577049 Switch user feature has disappeared from GNOME Shell since upgrade from 15.10 to 16.04

Version: 0.6.40-2ubuntu11.1 2016-05-18 10:06:50 UTC

  accountsservice (0.6.40-2ubuntu11.1) xenial; urgency=medium

  * debian/patches/change-own-data-inactive.patch:
    - restore the allow_active/inactive rules they are needed, fix regression
      where the user account panel can't change the user own image/name
      (lp: #1581567)

 -- Sebastien Bacher <email address hidden> Fri, 13 May 2016 16:50:37 +0200
Source diff to previous version
1581567 SRU regression, can't change own data

Version: 0.6.40-2ubuntu11 2016-05-12 16:06:32 UTC

  accountsservice (0.6.40-2ubuntu11) xenial; urgency=medium

  * debian/patches/change-own-data-inactive.patch:
    - updated to use allow_any=yes to avoid displaying unndeed dialog for
      remote sessions as well, thanks Alkis Georgopoulos
      (lp: #1512002)

 -- Sebastien Bacher <email address hidden> Fri, 29 Apr 2016 16:15:39 +0200
1512002 Annoying dialog \


About   -   Send Feedback to @ubuntu_updates