-
accountsservice (22.07.5-2ubuntu1.5) jammy-security; urgency=medium
* SECURITY UPDATE: possible encrypted password disclosure
- debian/patches/CVE-2012-6655.patch: replace usermod -p with
chpasswd -e in src/user.c, src/util.c, src/util.h.
- CVE-2012-6655
-- Marc Deslauriers <email address hidden> Fri, 08 Mar 2024 11:55:23 -0500
-
accountsservice (22.07.5-2ubuntu1.4) jammy-security; urgency=medium
* SECURITY UPDATE: use-after-free in user.c (LP: #2024182)
- debian/patches/0010-set-language.patch: updated to properly return
from functions after throw_error() has been called.
- CVE-2023-3297
-- Marc Deslauriers <email address hidden> Tue, 20 Jun 2023 07:25:34 -0400
-
accountsservice (22.07.5-2ubuntu1.3) jammy-security; urgency=medium
* SECURITY UPDATE: accountsservice incorrect privilege dropping
(LP: #1974250)
- debian/patches/0009-language-tools.patch: updated to not reset
effective uid, and migrate root-owned .pam_environment file.
- This change was originally known as CVE-2020-16126 and got reverted
by mistake in 0.6.55-3ubuntu1.
- CVE-2022-1804
* Fix FTBFS with a newer python-dbusmock package:
- debian/patches/adduser_invocation.patch: fix invocation of AddUser in
tests/dbusmock/accounts_service.py.
- debian/patches/setlocked_signature.patch: fix the signature for the
SetLocked call in tests/dbusmock/accounts_service.py.
-- Marc Deslauriers <email address hidden> Thu, 19 May 2022 20:02:04 -0400
-
accountsservice (22.07.5-2ubuntu1) jammy; urgency=medium
* Merge with Debian, remaining Ubuntu changes:
* debian/control:
- Add build-depends on dh-translations
* debian/rules:
- Build with translations to update POT file.
- set -Dextra_admin_groups to add admin users to the same groups than
user-setup is using for the initial account
- We use custom.conf, not daemon.conf
* debian/libaccountsservice0.symbols:
- Add symbols added from patches.
* debian/patches/0001-formats-locale-property.patch:
- Addition of FormatsLocale property and SetFormatsLocale method.
* debian/patches/0005-gdm_config_file_path.patch:
- Disabled, as we are using custom.conf.
* debian/patches/0010-set-language.patch:
- Save user language and regional formats settings to ~/.pam_environment.
* debian/patches/0011-add-background-file-support.patch:
- Add support for a BackgroundFile property, similar to IconFile.
* debian/patches/0012-add-keyboard-layout-support.patch:
- Add XKeyboardLayouts property to report a user's keyboard layouts.
* debian/patches/0013-add-has-message-support.patch:
- Add XHasMessages property to report if a user had unread messages.
* debian/patches/0016-add-input-sources-support.patch:
- Store input sources in the user object.
* debian/patches/0021-support-extrausers.patch:
- In addition to watching /etc/{passwd,shadow,group}, also watch those
same files in /var/lib/extrausers/, if they exist.
* debian/patches/gitlab_change_types.patch:
- fix changing account types failing on missing groups
* debian/patches/gitlab_shared_tmp.patch:
- don't use a private tmp since API clients sometime store files there
-- Sebastien Bacher <email address hidden> Tue, 22 Feb 2022 16:27:56 +0100
-
accountsservice (0.6.55-3ubuntu6) jammy; urgency=medium
* d/p/git_admin_groups.patch,
d/p/0002-create-and-manage-groups-like-on-a-debian-system.patch:
- don't fail adding an admin if one of the default group doesn't exist
-- Sebastien Bacher <email address hidden> Fri, 28 Jan 2022 11:39:58 +0100
-
accountsservice (0.6.55-3ubuntu5) jammy; urgency=medium
* debian/rules:
- don't include debian-tor in the extra admin groups since that one
doesn't exist on a default Ubuntu installation and create issues
-- Sebastien Bacher <email address hidden> Tue, 25 Jan 2022 13:57:35 +0100
-
accountsservice (0.6.55-3ubuntu4) jammy; urgency=medium
* debian/patches/git_new_meson.patch:
- include git patch to fix the build with the new meson
-- Sebastien Bacher <email address hidden> Tue, 25 Jan 2022 11:20:15 +0100
-
accountsservice (0.6.55-3ubuntu3) jammy; urgency=medium
* debian/rules:
- set -Dextra_admin_groups to add admin users to the same groups than
user-setup is using for the initial account (lp: #1950484)
-- Sebastien Bacher <email address hidden> Tue, 25 Jan 2022 10:58:43 +0100
-
accountsservice (0.6.55-3ubuntu2) jammy; urgency=medium
* SECURITY UPDATE: double-free in the SetLanguage D-Bus method
(LP: #1950149)
- debian/patches/0010-set-language.patch: updated to remove g_autofree
on result of user_get_fallback_value().
- CVE-2021-3939
* debian/patches/0010-set-language.patch: updated to fix minor memory
leaks by adding g_autofree to results of user_update_environment().
-- Marc Deslauriers <email address hidden> Tue, 16 Nov 2021 13:11:22 -0500
-
accountsservice (0.6.55-3ubuntu1) jammy; urgency=medium
* Merge with Debian, remaining Ubuntu changes:
* debian/control:
- Add build-depends on ddh-translations
* debian/rules:
- Build with translations to update POT file.
- We use custom.conf, not daemon.conf
* debian/libaccountsservice0.symbols:
- Add symbols added from patches.
* debian/patches/0001-formats-locale-property.patch:
- Addition of FormatsLocale property and SetFormatsLocale method.
* debian/patches/0005-gdm_config_file_path.patch:
- Disabled, as we are using custom.conf.
* debian/patches/0010-set-language.patch:
- Save user language and regional formats settings to ~/.pam_environment.
* debian/patches/0011-add-background-file-support.patch:
- Add support for a BackgroundFile property, similar to IconFile.
* debian/patches/0012-add-keyboard-layout-support.patch:
- Add XKeyboardLayouts property to report a user's keyboard layouts.
* debian/patches/0013-add-has-message-support.patch:
- Add XHasMessages property to report if a user had unread messages.
* debian/patches/0016-add-input-sources-support.patch:
- Store input sources in the user object.
* debian/patches/0021-support-extrausers.patch:
- In addition to watching /etc/{passwd,shadow,group}, also watch those
same files in /var/lib/extrausers/, if they exist.
-- Robert Ancell <email address hidden> Tue, 16 Nov 2021 15:48:27 +1300
-
accountsservice (0.6.55-0ubuntu14) impish; urgency=medium
* No-change rebuild to build packages with zstd compression.
-- Matthias Klose <email address hidden> Thu, 07 Oct 2021 12:29:08 +0200
