-
accountsservice (0.6.40-2ubuntu11.6) xenial-security; urgency=medium
* SECURITY UPDATE: accountsservice drop privileges SIGSTOP DoS
(LP: #1900255)
- debian/patches/0010-set-language.patch: updated to not drop real uid
and real gid in user_drop_privileges_to_user.
- debian/patches/0009-language-tools.patch: updated to not reset
effective uid.
- CVE-2020-16126
* SECURITY UPDATE: directory traversal issue
- debian/patches/CVE-2018-14036.patch: fix insufficient path prefix
check in src/user.c.
- CVE-2018-14036
-- Marc Deslauriers <email address hidden> Mon, 02 Nov 2020 12:10:06 -0500
-
accountsservice (0.6.40-2ubuntu11.3) xenial; urgency=medium
* debian/patches/wtmp-fix-logout.patch:
- Backport 0.6.43 commit to fix logout records when a user
shuts down or restarts their computer (LP: #1443052)
-- Nikita Yerenkov-Scott <email address hidden> Tue, 25 Oct 2016 16:15:26 +0100
-
accountsservice (0.6.40-2ubuntu11.2) xenial; urgency=medium
* debian/patches/0014-libsystemd.patch:
- Backport patch to adapt to systemd 209, fixes missing "Switch User"
functionality in GNOME Shell (LP: #1577049)
* debian/control:
- Bump minimum systemd for above patch
-- Jeremy Bicha <email address hidden> Thu, 25 Aug 2016 21:27:44 -0400
-
accountsservice (0.6.40-2ubuntu11.1) xenial; urgency=medium
* debian/patches/change-own-data-inactive.patch:
- restore the allow_active/inactive rules they are needed, fix regression
where the user account panel can't change the user own image/name
(lp: #1581567)
-- Sebastien Bacher <email address hidden> Fri, 13 May 2016 16:50:37 +0200
-
accountsservice (0.6.40-2ubuntu11) xenial; urgency=medium
* debian/patches/change-own-data-inactive.patch:
- updated to use allow_any=yes to avoid displaying unndeed dialog for
remote sessions as well, thanks Alkis Georgopoulos
(lp: #1512002)
-- Sebastien Bacher <email address hidden> Fri, 29 Apr 2016 16:15:39 +0200
-
accountsservice (0.6.40-2ubuntu10) xenial; urgency=medium
* debian/patches/change-own-data-inactive.patch:
- let inactive user sessions update their own datas without
triggering authentification dialogs. Indicator-messages does that to
indicate to the greeter that the user received messages, which
currently leads to auth dialog to be stacked in the locked session,
thanks Alkis Georgopoulos (lp: #1512002)
-- Sebastien Bacher <email address hidden> Tue, 19 Apr 2016 11:23:47 +0200
-
accountsservice (0.6.40-2ubuntu9) xenial; urgency=medium
* debian/patches/0005-gdm_config_file_path_ubuntu.patch:
Copy patch from Debian packaging to correct the path to the
GDM config file. (LP: #1547297)
* debian/patches/0007-add-lightdm-support.patch:
Update paths to gdm config directory
-- Tim Lunn <email address hidden> Wed, 06 Apr 2016 10:59:09 +1000
-
accountsservice (0.6.40-2ubuntu8) xenial; urgency=medium
* debian/patches/0009-language-tools.patch:
- Make the language2locale script return a locale name also when
the argument is a complete locale name including codeset
(LP: #1556684).
-- Gunnar Hjalmarsson <email address hidden> Wed, 16 Mar 2016 12:42:00 +0100
-
accountsservice (0.6.40-2ubuntu7) xenial; urgency=medium
* Drop 0014-pam-pin.patch and 0015-pam-pin-ubuntu.patch, along with
the associated libpam-pin package. Added a Breaks on the old
package to get it off systems too. These patches were from an
upstream bug but they never made progress there. And we never used
the module in Ubuntu Touch like we planned either. So I'm dropping
it before the LTS is released.
-- Michael Terry <email address hidden> Fri, 08 Jan 2016 12:38:51 -0500
-
accountsservice (0.6.40-2ubuntu6) xenial; urgency=high
* Build-depend on libsystemd-dev, rather than split name dev packages.
-- Dimitri John Ledkov <email address hidden> Mon, 07 Dec 2015 09:59:29 +0000
-
accountsservice (0.6.40-2ubuntu5) wily; urgency=medium
* debian/patches/0009-language-tools.patch:
- Correction of a code inconsistency introduced in version
0.6.40-2ubuntu2 (LP: #1502921).
-- Gunnar Hjalmarsson <email address hidden> Tue, 06 Oct 2015 06:51:00 +0200
