Change logs for accountsservice source package in Mantic

  • accountsservice (23.13.9-2ubuntu2) mantic; urgency=medium
    
      * SECURITY UPDATE: use-after-free in user.c (LP: #2024182)
        - debian/patches/0010-set-language.patch: updated to properly return
          from functions after throw_error() has been called.
        - CVE-2023-3297
    
     -- Marc Deslauriers <email address hidden>  Wed, 28 Jun 2023 11:10:09 -0400
  • accountsservice (23.13.9-2ubuntu1) mantic; urgency=medium
    
      * Includes some extra upstream bugfixes
    
    accountsservice (23.13.9-2) unstable; urgency=medium
    
      * debian/patches/git_user_manager.patch:
        - Disconnect from manager signals when freeing a request and resolve
          indicator-messages crashing on logout (lp: #2015962)
      * debian/patches/git_default_gdm.patch:
        - default to gdm if there display-manager.service isn't a known target,
          which is the case for our gdm called gdm3, fixes the service
          crashing when trying to toggle autologin (lp: #2024870)
    
     -- Sebastien Bacher <email address hidden>  Mon, 26 Jun 2023 16:25:07 +0200
  • accountsservice (23.13.9-1ubuntu2) mantic; urgency=medium
    
      * d/p/0010-set-language.patch:
        - Change the order of things in user_change_language_authorized_cb()
          in src/user.c (LP: #2024560).
      * Drop d/p/language-not-xpg.patch
    
     -- Gunnar Hjalmarsson <email address hidden>  Sun, 25 Jun 2023 02:21:10 +0200
  • accountsservice (23.13.9-1ubuntu1) mantic; urgency=medium
    
      * New upstream version
      * debian/patches/ubuntu_notest_language.patch:
         - Disable language tests on Ubuntu for now. Our patches to edit
           .pam_environment rely on access to the user directory which isn't working
           in the restricted testing environment
      * debian/patches/language-not-xpg.patch:
        - disable new 'XPG locale verification', they make the setlanguage error
          out on value as 'fr_FR:en'.
      * Resynchronize on Debian, remaining Ubuntu changes
      * debian/control:
        - Add build-depends on dh-translations
      * debian/rules:
        - Build with translations to update POT file.
        - set -Dextra_admin_groups to add admin users to the same groups
          than user-setup is using for the initial account
        - We use custom.conf, not daemon.conf
      * debian/libaccountsservice0.symbols:
        - Add symbols added from patches.
      * debian/accountsservice.install:
        - Install language-tools scripts.
      * debian/patches/0001-formats-locale-property.patch:
        - Addition of FormatsLocale property and SetFormatsLocale method.
      * debian/patches/0005-gdm_config_file_path.patch:
        - Disabled, as we are using custom.conf.
      * debian/patches/0009-language-tools.patch,
        debian/patches/0010-set-language.patch:
        - Save user language and regional formats settings to
          ~/.pam_environment.
      * debian/patches/0011-add-background-file-support.patch:
        - Add support for a BackgroundFile property, similar to IconFile.
      * debian/patches/0012-add-keyboard-layout-support.patch:
        - Add XKeyboardLayouts property to report a user's keyboard layouts.
      * debian/patches/0013-add-has-message-support.patch:
        - Add XHasMessages property to report if a user had unread messages.
      * debian/patches/0016-add-input-sources-support.patch:
        - Store input sources in the user object.
      * debian/patches/0021-support-extrausers.patch:
        - In addition to watching /etc/{passwd,shadow,group}, also watch
          those same files in /var/lib/extrausers/, if they exist.
    
    accountsservice (23.13.9-1) unstable; urgency=medium
    
      * New upstream version
      * Remove cherrpick patches which are included in the new tarball
      * debian/patches/0002-create-and-manage-groups-like-on-a-debian-system.patch:
        - updated to not use a deprecated function anymore
      * debian/patches/0005-gdm_config_file_path.patch:
        - removed, the gdm config file is specified in debian/rules now
      * debian/patches/0007-add-lightdm-support.patch:
        - removed, the feature has been included upstream
      * debian/patches/no-check-format.patch:
        - skip a formatting test which is written to work on a git repo checkout
      * debian/libaccountsservice0.symbols:
        - include new symbols
    
    accountsservice (22.08.8-6) unstable; urgency=medium
    
      * Team upload
      * d/p/daemon-Don-t-crash-if-etc-shadow-doesn-t-exist.patch:
        Add patch to prevent a crash if /etc/shadow is missing or empty
        (Closes: #1031309)
      * d/patches: Mark most patches as having been applied upstream
    
    accountsservice (22.08.8-5) unstable; urgency=medium
    
      * Team upload
      * d/p/user-Use-correct-format-strings-to-print-accounts_user_ge.patch,
        d/p/Annotate-varargs-functions-with-G_GNUC_PRINTF.patch:
        Add proposed patches to fix autopkgtest failure on armel and armhf.
        A format string error led to a segfault on these architectures.
      * d/tests/integration.py: Set up libnss-systemd correctly.
        This doesn't actually matter for what we do in this test, but the
        format string was wrong, which would have resulted in getpwuid failing.
      * d/tests/integration.py: Add copyright/licensing headers
      * d/tests/integration.py: Resolve a TODO comment
      * d/tests/integration.py: Don't wait forever for state to change
      * d/tests/integration.py: Lint fixes
    
    accountsservice (22.08.8-4) unstable; urgency=medium
    
      * Team upload
      * d/p/daemon-Clarify-use-of-generator_state-users.patch,
        d/p/daemon-Define-local-users-as-being-exactly-those-present-.patch:
        Replace previous solution for #1030262 with the version that was merged
        upstream.
        This has the effect that users existing in /etc/passwd but not
        /etc/shadow are treated as remote, which is as intended by upstream
        but had unintentionally regressed in 0.6.50.
        - d/p/daemon-Enumerate-all-users-in-etc-passwd-to-decide-which-.patch:
          Drop patch, superseded by the above
      * d/p/user-Replace-usermod-p-with-chpasswd-e.patch:
        Mark as having been applied upstream
    
    accountsservice (22.08.8-3) unstable; urgency=medium
    
      * Team upload
      * d/control: accountsservice Recommends polkitd.
        Without polkitd, its D-Bus interface will be essentially read-only.
      * d/tests/integration.py: Add an integration test.
        Among other things, this exercises #1030253 and #1030262, and detected
        the missing Recommends on polkitd.
      * d/p/user-Replace-usermod-p-with-chpasswd-e.patch:
        Add patch to avoid (encrypted) password being briefly visible in /proc
        (Closes: #757912; CVE-2012-6655)
        - d/tests/integration.py: Assert that CVE-2012-6655 was avoided
      * d/copyright: Fix a typo detected by Lintian
      * Standards-Version: 4.6.2 (no changes required)
    
    accountsservice (22.08.8-2) unstable; urgency=medium
    
      * Team upload
    
      [ Luca Boccassi ]
      * accountsservice: depend on default-dbus-system-bus | dbus-system-bus,
        instead of requiring a specific implementation
    
      [ Simon McVittie ]
      * d/control: Build-depend on polkitd instead of transitional policykit-1
        (Closes: #1025542)
      * d/patches: Re-export patch series (no functional changes)
      * d/p/0002-create-and-manage-groups-like-on-a-debian-system.patch:
        Call adduser with --disabled-password instead of --disabled-login.
        These options did essentially the same thing in Debian 11, and probably
        older versions.
        Since adduser 3.130, --disabled-login has the additional effect of
        setting the user's shell to /usr/sbin/nologin, which is not the expected
        default when adding a user via an interface intended for managing
        human users' interactive login accounts. Switching to --disabled-password
        preserves previous functionality here.
        (Closes: #1030253)
      * d/p/daemon-Enumerate-all-users-in-etc-passwd-to-decide-which-.patch:
        Add proposed fix for local users sometimes being treated as remote,
        which results in a misleading UX in gnome-control-center
        (Closes: #1030262)
    
     -- Sebastien Bacher <email address hidden>  Wed, 21 Jun 2023 16:50:23 +0200
  • accountsservice (22.08.8-1ubuntu7) lunar; urgency=medium
    
      * debian/patches/gitlab_manager_requests.patch:
        - Disconnect from manager signals when freeing a request and resolve
          indicator-messages crashing on logout, thanks Marco! (lp: #2015962)
    
     -- Sebastien Bacher <email address hidden>  Thu, 13 Apr 2023 23:59:56 +0200