public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Milan Crha <mcrha@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/gdm] f44: Update to 50.3
Date: Thu, 03 Sep 2026 06:02:24 GMT [thread overview]
Message-ID: <178841534490.1.13096906501259728240.rpms-gdm-90a5d2a2acdc@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/gdm
Branch : f44
Commit : 90a5d2a2acdcbe53a40fbb69924effaa1de3f3f2
Author : Milan Crha <mcrha@redhat.com>
Date : 2026-09-03T08:02:33+02:00
Stats : +2/-63 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/gdm/c/90a5d2a2acdcbe53a40fbb69924effaa1de3f3f2?branch=f44
Log:
Update to 50.3
---
diff --git a/0001-pam_gdm-Don-t-reject-unterminated-buffers.patch b/0001-pam_gdm-Don-t-reject-unterminated-buffers.patch
deleted file mode 100644
index 129ab58..0000000
--- a/0001-pam_gdm-Don-t-reject-unterminated-buffers.patch
+++ /dev/null
@@ -1,55 +0,0 @@
-From fc958fa6546ca6ea0112dd1651cf85bea14d8122 Mon Sep 17 00:00:00 2001
-From: Adrian Vovk <adrianvovk@gmail.com>
-Date: Thu, 13 Aug 2026 16:29:01 -0400
-Subject: [PATCH] pam_gdm: Don't reject unterminated buffers
-
-The data returned by the kernel keyring is a list of strings separated
-by their null terminators. However, the might not be a terminator on the
-very end
-
-Previously we were using strlen(), which meant we could read past the
-end of the array. A previous security patch was a little overzealous,
-and rather than just fixing the strlen() call it _also_ completely
-rejected unterminated buffers.
-
-However, systemd _intentionally_ does not terminate the buffer when it
-creates it. This means that, after this security patch, pam_gdm
-basically stopped working. Let's fix the regression but keep the
-underlying bugfix
-
-Fixes: 4ecd58d766840835598e5b6c63088460dba6ac4d
-
-Closes: https://gitlab.gnome.org/GNOME/gdm/-/work_items/1090
-Part-of: <https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/391>
----
- pam_gdm/pam_gdm.c | 14 --------------
- 1 file changed, 14 deletions(-)
-
-diff --git a/pam_gdm/pam_gdm.c b/pam_gdm/pam_gdm.c
-index a7351c28c..310feabdc 100644
---- a/pam_gdm/pam_gdm.c
-+++ b/pam_gdm/pam_gdm.c
-@@ -67,20 +67,6 @@ pam_sm_authenticate (pam_handle_t *pamh,
- return PAM_AUTHINFO_UNAVAIL;
-
- cached_passwords_length = r;
--
-- /*
-- The payload is a NUL-separated list of passwords, but the blob
-- returned by the kernel is not guaranteed to be NUL-terminated.
-- Reject a payload whose final entry is not terminated within the
-- buffer so that walking it below cannot read past the end.
-- */
-- if (cached_passwords_length == 0 ||
-- ((char *) cached_passwords)[cached_passwords_length - 1] != '\0') {
-- gdm_pam_zero_buffer (cached_passwords, cached_passwords_length);
-- free (cached_passwords);
-- return PAM_AUTHINFO_UNAVAIL;
-- }
--
- /*
- Find the last password in the NUL-separated list of passwords.
- Multiple passwords are returned either when the user enters an
---
-2.55.0
-
diff --git a/gdm.spec b/gdm.spec
index 86f8b58..aa40105 100644
--- a/gdm.spec
+++ b/gdm.spec
@@ -15,7 +15,7 @@
Name: gdm
Epoch: 1
-Version: 50.2
+Version: 50.3
Release: %autorelease
Summary: The GNOME Display Manager
@@ -26,12 +26,6 @@ Source1: org.gnome.login-screen.gschema.override
Source2: gdm.sysusers
# Upstream patches
-# https://gitlab.gnome.org/GNOME/gdm/-/work_items/1090
-# https://bugzilla.redhat.com/show_bug.cgi?id=2517317
-# https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/391
-# pam_gdm: Don't reject unterminated buffers
-# Fixes auto-login regression
-Patch: 0001-pam_gdm-Don-t-reject-unterminated-buffers.patch
# Downstream patches
Patch: 0001-Honor-initial-setup-being-disabled-by-distro-install.patch
diff --git a/sources b/sources
index 7895e6d..fc546f0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (gdm-50.2.tar.xz) = 97afa15539b3cb1b6281c8812a8aaaf4d96951897ef6088e2b86c187a2e70f1423d56e975d3822268338d0bb145bac31e8d98fa0d0a248a1f907380d0cfe6abb
+SHA512 (gdm-50.3.tar.xz) = 04519ece8ff8faead594ae9870397731111b2716c4af3cc635515f41b96cc84c5e6d3c17b414a721576bb5f074ca9502b1b6d3fcda0d69407626f1a33f2072d0
reply other threads:[~2026-09-03 6:02 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178841534490.1.13096906501259728240.rpms-gdm-90a5d2a2acdc@fedoraproject.org \
--to=mcrha@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox