Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gdm for openSUSE:Factory checked in at 2026-10-30 18:09:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gdm (Old) and /work/SRC/openSUSE:Factory/.gdm.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gdm" Fri Oct 30 18:09:39 2026 rev:307 rq:1393592 version:51.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/gdm/gdm.changes 2026-09-07 11:27:44.154660154 +0200 +++ /work/SRC/openSUSE:Factory/.gdm.new.1255/gdm.changes 2026-10-30 18:13:36.750563209 +0100 @@ -1,0 +2,154 @@ +Mon Oct 26 03:17:22 UTC 2026 - Xiaoguang Wang <[email protected]> + +- Add gdm-timeout-for-plymouth-quit.patch: Use a separate timeout + for the plymouth quit (bsc#1270027 glgo#GNOME/gdm!414) + +------------------------------------------------------------------- +Wed Oct 21 06:21:14 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 51.1.1: + * Fixed headless user display creation erroring out. + +------------------------------------------------------------------- +Sat Oct 17 10:07:03 UTC 2026 - Bjørn Lie <[email protected]> + +- Update to version 51.1: + * Improve the reliability of our GPU-is-ready detection (corrected the code + that checks for the boot_display sysfs attribute) + * Restricted which PAM stacks GDM will run, to defend against malicious + greeters + * Oo7 enablement for Arch Linux's PAM stacks + * Fixed bug where gnome-headless-session@<user>.service would stop working if + the user logs out from within the headless session + * Changed behavior of RemoteDisplayFactory API to wait for the new headless + display to have a `session-id` set before returning/exporting it. This is a + backwards-compatible change that makes it easier to use this API + * Code cleanups + * Updated translations. + +------------------------------------------------------------------- +Wed Sep 30 16:49:28 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update version dependencies according to meson.build. + +------------------------------------------------------------------- +Tue Sep 15 08:31:20 UTC 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 51.0: + + Fixed some memory leaks + + Correctness improvements to GDM's PAM extensions + + Fixes to remote login with Kerberos + + Updated translations. +- Rebase gdm-initial-setup-hardening.patch. + +------------------------------------------------------------------- +Fri Sep 4 15:20:32 CEST 2026 - Dominique Leuenberger <[email protected]> + +- Update to version 51.rc: + + Follow-up bugfix for $GDM_AUTH_SESSION_ID + + Follow-up bugfix for redone PAM service loading logic + + Follow-up bugfix for pam_gdm keyring buffer bounds check + + Fixed a couple crashes and memory leaks + + Introduced pre-authenticated remote displays, for Kerberos + authentication in gnome-remote-desktop + + Updated Fedora's PAM rules to include support for oo7 instead + of gnome-keyring + + Translation updates + +------------------------------------------------------------------- +Fri Sep 4 15:20:31 CEST 2026 - Bjørn Lie <[email protected]> + +- Update to version 51.beta: + + Fixed autologin bypass where a compromised greeter could + request autologin for any local account by sending arbitrary + usernames via BeginAutoLogin + + Dropped unused `enable-web-authentication` and + `enable-passkey-authentication` gsettings keys from the + `org.gnome.login-screen` schema + + Introduced PAM substack safety net, such that authentication + cannot by bypassed on systems where authselect hasn't + configured a PAM service file for a specific authentication + method (i.e. `gdm-switchable-auth`) + + Fixed double-free in session worker + + Reworked build script for installing PAM service files into + modern search path + + Redid PAM service loading logic in GDM, to introduce meaningful + error messages whenever PAM services aren't found + + Fixed memory leaks in PAM extensions + + Fixed denial of service where an invalid session name from the + greeter would cause the entire daemon to exit, terminating all + active sessions + + Adjusted D-Bus object path generation for + /org/gnome/DisplayManager/Displays/* to fix ASLR leak + + Fixed input sanitation when forwarding unknown usernames to + audit subsystem + + Fixed passphrase handling in pam_gdm to wipe cached plaintext + passwords before freeing and to bound the keyring buffer walk + preventing out-of-bounds reads + + Fixed path traversal vulnerability where a compromised greeter + could load arbitrary .desktop files via SelectSession, + potentially executing attacker-controlled commands as the + authenticated user + + Introduced $GDM_AUTH_SESSION_ID environment variable, which + communicates the logind session ID of the caller that requested + authentication. This will be used for smartcard redirection for + remote sessions + +------------------------------------------------------------------- +Fri Sep 4 15:20:30 CEST 2026 - Bjørn Lie <[email protected]> + +- Update to version 51.alpha: + + Compatibility with kmsconvt + + Add checks to make sure PAM plugins don't drop fsuid privilges + and break GDM + + Reworked the way GDM constructs XDG_DATA_DIRS for its launch + environment, so that it will no longer hard-code /usr/share at + a higher priority than /usr/local/share. This behavior would + prevent people from locally hacking on gnome-shell with + --prefix=/usr/local without also having to rebuild GDM with the + same prefix + + Reworked conflicting session logic to use logind for + enumeration. Previously, GDM would only look for sessions it + started itself, but that would cause it to miss conflicting + sessions started externally, such as those from ThinLinc or + TigerVNC + + Fixed bug where plymouth never quit on headless or no-monitor + systems, which would prevent the system from ever reaching + graphical.target + + Added setting to change the fallback session. This is the + session that gets used whenever a user doesn't have a preferred + session selected, or their preferred session is unusable. + Sysadmins can use this setting to change the selected session + for users that have never logged into the system before + + Fixed bug where GDM would start X11 sessions with + XDG_SESSION_TYPE=wayland + + Fixed PAM handling code to notify PAM modules when we've + switched user and are about to exec the session leader. This + fixes PAM modules like pam_cap.so in its `defer` mode + + Removed unnecessary `SetRemoteId` method from the remote + display DBus API + + Added setting to turn off local greeter sessions, for + headless-only systems + + Removed unused settings + + Documented remote display DBus API + + Documented GDM's settings + + Dropped dconf override of + org.gnome.desktop.session.session-name, and instead + gnome-session is now explicitly told to launch the GDM login + screen UI even if dconf overrides fail to get applied + + Addressed warnings from Fedora's static analyzer + + Fixed bug where the kernel's VT cursor may flicker during the + transition between graphical sessions (i.e. at log out) + + Dropped ancient GDM docs, which have been out of date for a + very long time and are entirely inaccurate now. + + Fixed some more misc. bugs: memory leaks, crashes, etc NOTE: In + the previous 50.X release series, we removed GDM's ability to + execute the various PreSession/PostSession/etc scripts as part + of the X11 removal. However, it turned out that some people + were using these hook points on Wayland, despite their limited + functionality there. Still, the feature is gone for good, and I + wanted to make sure it's listed in the changelog. See the issue + for more details and context: + https://gitlab.gnome.org/GNOME/gdm/-/work_items/1059 + +------------------------------------------------------------------- @@ -5193,2 +5346,0 @@ - - Old: ---- gdm-50.3.tar.xz New: ---- gdm-51.1.1.tar.xz gdm-timeout-for-plymouth-quit.patch ----------(New B)---------- New: - Add gdm-timeout-for-plymouth-quit.patch: Use a separate timeout for the plymouth quit (bsc#1270027 glgo#GNOME/gdm!414) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gdm.spec ++++++ --- /var/tmp/diff_new_pack.squoN3/_old 2026-10-30 18:13:47.100996498 +0100 +++ /var/tmp/diff_new_pack.squoN3/_new 2026-10-30 18:13:47.113997042 +0100 @@ -27,7 +27,7 @@ %endif Name: gdm -Version: 50.3 +Version: 51.1.1 Release: 0 Summary: The GNOME Display Manager License: GPL-2.0-or-later @@ -67,6 +67,8 @@ Patch3: gdm-service-keytable.patch # PATCH-FIX-OPENSUSE gdm-fix-tty1-mode.patch bsc#1250688 [email protected] -- Fix invalid tty1 state Patch4: gdm-fix-tty1-mode.patch +# PATCH-FIX-UPSTREAM gdm-timeout-for-plymouth-quit.patch bsc#1270027 glgo#GNOME/gdm!414 [email protected] -- Use a separate timeout for the plymouth quit +Patch5: gdm-timeout-for-plymouth-quit.patch ### NOTE: Keep please SLE-only patches at bottom (starting on 1000). # PATCH-FIX-SLE gdm-disable-gnome-initial-setup.patch bnc#1067976 [email protected] -- Disable gnome-initial-setup runs before gdm, g-i-s will only serve for CJK people to choose the input-method after login. @@ -85,17 +87,17 @@ BuildRequires: tcpd-devel BuildRequires: pkgconfig(accountsservice) >= 0.6.35 BuildRequires: pkgconfig(audit) -BuildRequires: pkgconfig(check) -BuildRequires: pkgconfig(gio-2.0) >= 2.56.0 -BuildRequires: pkgconfig(gio-unix-2.0) >= 2.56.0 -BuildRequires: pkgconfig(glib-2.0) >= 2.56.0 -BuildRequires: pkgconfig(gobject-2.0) >= 2.56.0 +BuildRequires: pkgconfig(check) >= 0.9.4 +BuildRequires: pkgconfig(gio-2.0) >= 2.68.0 +BuildRequires: pkgconfig(gio-unix-2.0) >= 2.68.0 +BuildRequires: pkgconfig(glib-2.0) >= 2.68.0 +BuildRequires: pkgconfig(gobject-2.0) >= 2.68.0 BuildRequires: pkgconfig(gobject-introspection-1.0) >= 0.9.12 BuildRequires: pkgconfig(gthread-2.0) BuildRequires: pkgconfig(gtk+-3.0) >= 2.91.1 BuildRequires: pkgconfig(gudev-1.0) >= 232 BuildRequires: pkgconfig(iso-codes) -BuildRequires: pkgconfig(json-glib-1.0) +BuildRequires: pkgconfig(json-glib-1.0) >= 1.2.0 BuildRequires: pkgconfig(libkeyutils) BuildRequires: pkgconfig(libsystemd) BuildRequires: pkgconfig(ply-boot-client) @@ -381,7 +383,6 @@ %files %license COPYING %doc AUTHORS NEWS README.md -%doc %{_datadir}/help/C/%{name}/ %dir %config %{_sysconfdir}/gdm %config %{_sysconfdir}/gdm/[IPXl]* %{_sbindir}/gdm ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.squoN3/_old 2026-10-30 18:13:47.422009936 +0100 +++ /var/tmp/diff_new_pack.squoN3/_new 2026-10-30 18:13:47.433010397 +0100 @@ -1,7 +1,7 @@ -mtime: 1788379508 -commit: 138c33b1588d3416a90deaa6259c99a596c7da79876f99e58d9bac35a2195228 +mtime: 1793148584 +commit: 37688664575c3990d62a80e809f72c4facec980cc011b39cafa8a3c0c5a4ef44 url: https://src.opensuse.org/GNOME/gdm -revision: 138c33b1588d3416a90deaa6259c99a596c7da79876f99e58d9bac35a2195228 +revision: 37688664575c3990d62a80e809f72c4facec980cc011b39cafa8a3c0c5a4ef44 trackingbranch: factory projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj ++++++ _service ++++++ --- /var/tmp/diff_new_pack.squoN3/_old 2026-10-30 18:13:47.526014290 +0100 +++ /var/tmp/diff_new_pack.squoN3/_new 2026-10-30 18:13:47.548015211 +0100 @@ -3,7 +3,7 @@ <service name="obs_scm" mode="manual"> <param name="scm">git</param> <param name="url">https://gitlab.gnome.org/GNOME/gdm.git</param> - <param name="revision">50.3</param> + <param name="revision">51.1.1</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> <param name="versionrewrite-pattern">(.*)\+0</param> <param name="versionrewrite-replacement">\1</param> ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-10-28 01:49:44.000000000 +0100 @@ -0,0 +1,5 @@ +*.obscpio +*.osc +_build.* +.pbuild +osc-collab.* ++++++ gdm-50.3.tar.xz -> gdm-51.1.1.tar.xz ++++++ ++++ 114924 lines of diff (skipped) ++++++ gdm-initial-setup-hardening.patch ++++++ --- /var/tmp/diff_new_pack.squoN3/_old 2026-10-30 18:13:49.327089686 +0100 +++ /var/tmp/diff_new_pack.squoN3/_new 2026-10-30 18:13:49.354090817 +0100 @@ -1,8 +1,8 @@ -Index: gdm-50.beta/daemon/gdm-display.c +Index: gdm-51.0/daemon/gdm-display.c =================================================================== ---- gdm-50.beta.orig/daemon/gdm-display.c -+++ gdm-50.beta/daemon/gdm-display.c -@@ -1081,12 +1081,12 @@ can_create_environment (const char *sess +--- gdm-51.0.orig/daemon/gdm-display.c ++++ gdm-51.0/daemon/gdm-display.c +@@ -1083,12 +1083,12 @@ can_create_environment (const char *sess return session_exists; } @@ -18,7 +18,7 @@ return TRUE; return FALSE; -@@ -1168,7 +1168,7 @@ wants_initial_setup (GdmDisplay *self) +@@ -1170,7 +1170,7 @@ wants_initial_setup (GdmDisplay *self) priv = gdm_display_get_instance_private (self); @@ -27,10 +27,10 @@ return FALSE; } -Index: gdm-50.beta/daemon/gdm-manager.c +Index: gdm-51.0/daemon/gdm-manager.c =================================================================== ---- gdm-50.beta.orig/daemon/gdm-manager.c -+++ gdm-50.beta/daemon/gdm-manager.c +--- gdm-51.0.orig/daemon/gdm-manager.c ++++ gdm-51.0/daemon/gdm-manager.c @@ -61,7 +61,7 @@ #define GDM_MANAGER_PATH GDM_DBUS_PATH "/Manager" #define GDM_MANAGER_DISPLAYS_PATH GDM_DBUS_PATH "/Displays" @@ -39,8 +39,8 @@ +#define BLOCK_INITIAL_SETUP LOCALSTATEDIR "/lib/gdm/block-initial-setup" #define INITIAL_SETUP_EXPORT_DIR GDM_RUN_DIR "/gnome-initial-setup" - typedef struct -@@ -1551,6 +1551,7 @@ on_start_user_session (StartUserSessionO + static GQuark gdm_display_user_session_quark; +@@ -1605,6 +1605,7 @@ on_start_user_session (StartUserSessionO const char *session_id; gboolean doing_initial_setup = FALSE; uid_t allowed_uid; @@ -48,7 +48,7 @@ g_debug ("GdmManager: start or jump to session"); -@@ -1580,22 +1581,20 @@ on_start_user_session (StartUserSessionO +@@ -1634,22 +1635,20 @@ on_start_user_session (StartUserSessionO "doing-initial-setup", &doing_initial_setup, NULL); @@ -81,10 +81,10 @@ } else { g_debug ("GdmManager: session has its display server, reusing our server for another login screen"); } -Index: gdm-50.beta/daemon/meson.build +Index: gdm-51.0/daemon/meson.build =================================================================== ---- gdm-50.beta.orig/daemon/meson.build -+++ gdm-50.beta/daemon/meson.build +--- gdm-51.0.orig/daemon/meson.build ++++ gdm-51.0/daemon/meson.build @@ -215,6 +215,7 @@ endif gdm_daemon = executable('gdm', ++++++ gdm-timeout-for-plymouth-quit.patch ++++++ Index: gdm-51.1.1/daemon/gdm-manager.c =================================================================== --- gdm-51.1.1.orig/daemon/gdm-manager.c +++ gdm-51.1.1/daemon/gdm-manager.c @@ -64,6 +64,8 @@ #define BLOCK_INITIAL_SETUP LOCALSTATEDIR "/lib/gdm/block-initial-setup" #define INITIAL_SETUP_EXPORT_DIR GDM_RUN_DIR "/gnome-initial-setup" +#define PLYMOUTH_QUIT_TIMEOUT 20 + static GQuark gdm_display_user_session_quark; static GQuark gdm_display_reauth_pid_of_caller_quark; static GQuark gdm_session_remote_id_quark; @@ -762,7 +764,7 @@ gdm_manager_handle_register_session (Gdm if (display_is_local && self->plymouth_quit_timeout_id == 0) { self->plymouth_quit_timeout_id = - g_timeout_add_seconds_once (REGISTER_DISPLAY_TIMEOUT, + g_timeout_add_seconds_once (PLYMOUTH_QUIT_TIMEOUT, plymouth_quit_timeout_cb, self); } ++++++ gdm.obsinfo ++++++ --- /var/tmp/diff_new_pack.squoN3/_old 2026-10-30 18:13:49.730106557 +0100 +++ /var/tmp/diff_new_pack.squoN3/_new 2026-10-30 18:13:49.746107227 +0100 @@ -1,5 +1,5 @@ name: gdm -version: 50.3 -mtime: 1788374515 -commit: bb0f6ad980419def9fc6fb817d32ee22a65b0820 +version: 51.1.1 +mtime: 1792488996 +commit: d643e68963ab74564955025b554ec23cd794770d
