This bug was fixed in the package gnome-shell - 3.37.91-1ubuntu1
---------------
gnome-shell (3.37.91-1ubuntu1) groovy; urgency=medium
* Merge with debian, including new upstream release, remaining changes:
- Replace gnome-backgrounds dep with ubuntu-wallpapers and Suggests
gnome-themes-standard-data, gnome-backgrounds
- Add some Recommends:
+ ubuntu-session (| gnome-session) to have the ubuntu session available
+ xserver-xorg-legacy
+ yaru-theme-gnome-shell for the default ubuntu theming
- Update debian/gbp.conf with Ubuntu settings
- gnome-shell-common.prerm: Remove deprecated ubuntu theme alternative
- ubuntu/desktop_detect.patch:
+ add caching for desktop detection to avoid querying the current
desktop env variable as iterate through the list each time. For the
time of the Shell process, we can expect this env variable to stay
stable.
- ubuntu/smarter_alt_tab.patch:
+ quick alt-tab (without showing up the switcher) switch only between
the last window of the last 2 applications to be focused instead of
raising all windows of those apps.
- ubuntu/lightdm-user-switching.patch:
+ Allow user switching when using LightDM.
- ubuntu/lock_on_suspend.patch
+ Respect Ubuntu's lock-on-suspend setting.
- ubuntu/background_login.patch
+ Change default background color as we modified the default GDM color
for our ubuntu session.
- ubuntu/gdm_alternatives.patch
+ Add support for GDM3 theme alternatives
- optional-hot-corner.patch
+ enable patch proposed by upstream developer already in package (but
not in series) to add a settings for optional hot corner activation.
- main-show-an-error-message-on-gnome-shell-crash.patch,
global-make-possible-to-set-debug-flags-dynamically.patch,
main-increase-the-granularity-of-backtraces-in-SHELL_DEBU.patch,
main-add-backtrace-crashes-all-and-backtrace-all.patch,
sessionMode-add-support-for-debugFlags-parameter.patch:
+ Improve debug JS tracing for crash reports
- st-scroll-view-Handle-the-case-where-scrollbars-are-NULL.patch:
+ Fix crash on theme changes
- ubuntu/search-call-XUbuntuCancel-method-on-providers-when-no-dat.patch:
+ stop searches when requested from UI
- magnifier-Show-cursor-when-magnifier-is-enabled-and-scale.patch:
+ Show monitor scaled cursor when magnifier is enabled
- Break gnome-shell-extension-desktop-icons (<< 19.01.3+git20190814)
* debian/patches: Refreshed
* debian/control:
- Set breaks on upcoming core extensions. This update is going to break
them, so we need extensions updates before migra
- Set breaks on upcoming yaru theme.
There are not big deals using the current yaru, but better to wait for a
suynced one.
gnome-shell (3.37.91-1) experimental; urgency=medium
* New upstream release:
- Inhibit remote access when disabled by session mode
- Remove Frequent view from app picker
- Allow rearranging items in app picker
- Add support for parental controls filtering
- Support pre-authenticated logins in vmware environments (LP: #1886592)
- Update microphone icon on input volume changes
- Support prepending workspace with horizontal layouts
- Move calendar events out of notifications list
- Expose actor tree in looking glass
- Add support for "PrefersNonDefaultGPU" desktop key
- Move screencasting into a separate service (needs pipewire)
- Default to not installing updates on low battery
- Refactor and clean up app picker pagination (LP: #1873725)
- Misc fixes and memory improvements
* debian/control:
- Depend on debhelper-compat = 13
- Remove useless dependency on mutter (the binary)
- Test depend on gir1.2-upowerglib-1.0
- Update build dependencies to match upstream
- Remove leading space in gnome-shell-extension-prefs description
* debian/patches: Drop them all
* debian/rules:
- Don't manually set --fail-missing (included in dh 13)
- Remove uneeded test environment variables overrides (included in dh 13)
* debian/sources/lintian-override:
- Override some desktop files related warnings
* debian/gbp.conf: Point to upstream/latest
* debian/watch: Monitor unstable versions
gnome-shell (3.36.5-1) unstable; urgency=medium
* Team upload
* New upstream release
- Fix password briefly showing on login dialog during logout if it
was previously made visible (CVE-2020-17489, Closes: #968311)
* Drop most patches, applied upstream
-- Marco Trevisan (Treviño) <ma...@ubuntu.com> Thu, 27 Aug 2020
23:14:01 +0200
** Changed in: gnome-shell (Ubuntu Groovy)
Status: Fix Committed => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-17489
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gnome-shell in Ubuntu.
https://bugs.launchpad.net/bugs/1886592
Title:
Add support for VMware Horizon SSO to gnome-shell
Status in GNOME Shell:
Unknown
Status in gnome-shell package in Ubuntu:
Fix Released
Status in gnome-shell source package in Bionic:
In Progress
Status in gnome-shell source package in Eoan:
Won't Fix
Status in gnome-shell source package in Focal:
In Progress
Status in gnome-shell source package in Groovy:
Fix Released
Bug description:
[Impact]
VMware Horizon is a VDI product that runs atop of VMware's normal
virtualisation stack, and it supports SSO authentication for login.
In the past, the VMware Horizon agent has been pretty buggy, and
requires SSO patches to be present to function, otherwise it breaks
and causes entire outages for anyone trying to use the VDI.
To solve this, VMware had been custom compiling their own libgnome-
shell.so libraries with their SSO patches, which are based on oVirt's
SSO implementation. When you install VMware Horizon agent to the
instance, it overwrites Ubuntu's libgnome-shell.so with their custom
compiled one.
VMware don't keep their custom compiled libgnome-shell.so library up
to date, so bugs that have already been fixed still live on in their
library. Also, when Ubuntu updates our gnome-shell packages, it
overwrites the custom libgnome-shell.so library, which then causes the
Horizon agent to break, and causes outages for anyone using the VDI,
which have to be solved by manually copying the custom library back.
This situation is untenable for VMware Horizon users, so I have asked
VMware to upstream their SSO patches. After a long painful process,
they have landed in gnome-shell master.
This SRU will significantly improve the quality of life for VMware
Horizon users, and will remove the need for VMware to distribute
custom libraries.
[Testcase]
You need an instance that runs on VMware Horizon, and the Horizon
agent needs to be installed and running. Ideally, SSO authentication
should be enabled to test all features, but it is not necessary to
partially test.
Test packages are available in this ppa:
https://launchpad.net/~mruffell/+archive/ubuntu/sf247978-test
If you install the test package in a VMware Horizon VDI, the instance
should come up cleanly after reboot and function properly, especially
with SSO login.
The instance should be able to function without custom libgnome-
shell.so libraries provided by VMware.
[Regression Potential]
The code refactors the oVirt SSO implementation into a more
generalised interface, which other virtualisation platforms can use.
oVirt has been transitioned to this interface as part of the
refactoring, which means that any if the new oVirt SSO implementation
is broken, it could break users running in oVirt.
VMware's patches also use the new generalised interface, which is much
simpler than before, and it has been tested internally by VMware.
There was a very long review process with upstream GNOME, which ironed
out all of their concerns.
I have been reviewing the code along the way, and I am confident that
it will not cause any regressions. If a regression did occur, then it
would break SSO functionality only.
[Other Information]
Upstream Issue: https://gitlab.gnome.org/GNOME/gnome-shell/issues/1983
Upstream merge-request:
https://gitlab.gnome.org/GNOME/gnome-shell/-/merge_requests/915
Commits:
commit 809f820cd4a4eebb120ab5dde3f1985d35bcb540
Author: yun341 <5933...@qq.com>
Date: Sat, 4 Jan 2020 00:31:15 +0800
Subject: gdm: Refactor oVirt to a generic CredentialManager interface
Link:
https://gitlab.gnome.org/GNOME/gnome-shell/-/commit/809f820cd4a4eebb120ab5dde3f1985d35bcb540
commit 4ea0fca4fc09ffd6e0b6994ee1354f07f7d5d2b5
Author: yun341 <5933...@qq.com>
Date: Thu, 2 Jul 2020 06:54:55 +0800
Subject: gdm: Introduce vmware credential manager for pre-authenticated logins
Link:
https://gitlab.gnome.org/GNOME/gnome-shell/-/commit/4ea0fca4fc09ffd6e0b6994ee1354f07f7d5d2b5
To manage notifications about this bug go to:
https://bugs.launchpad.net/gnome-shell/+bug/1886592/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
