Opened 5 years ago

Closed 5 years ago

#9746 closed enhancement (fixed)

GNOME 3.26 Platform (gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0) [GDM: CVE-2017-12164]

Reported by: Douglas R. Reno Owned by: DJ Lucas
Priority: high Milestone: 8.2
Component: BOOK Version: SVN
Severity: normal Keywords:
Cc:

Description

Meta ticket. I'll update with changelogs as necessary.

Change History (25)

comment:1 by Douglas R. Reno, 5 years ago

Owner: changed from blfs-book@… to Douglas R. Reno
Status: newassigned

comment:2 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (glib-2.54.0 vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 gobject-introspection-1.54.0 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0)GNOME 3.26 Platform (glib-2.54.0 vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 gobject-introspection-1.54.0 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+-3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0)

I will start working on these at some point today. Need more sleep.

comment:3 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (glib-2.54.0 vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 gobject-introspection-1.54.0 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+-3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0)GNOME 3.26 Platform (glib-2.54.0 vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 gobject-introspection-1.54.0 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-cetner-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)

comment:4 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (glib-2.54.0 vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 gobject-introspection-1.54.0 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-cetner-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)GNOME 3.26 Platform (vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-cetner-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)

gobject-introspection-1.54.0: Fixed at r19211 glib2-2.54.0: Fixed at r19211

Note that we need to pay attention to gobject-introspection's syntax errors in the future.

comment:5 by bdubbs@…, 5 years ago

Summary: GNOME 3.26 Platform (vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-cetner-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)GNOME 3.26 Platform (vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)

Typo in Summary (center, not cetner)

comment:6 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (vala-0.38.1 libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)

comment:7 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)

comment:8 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject3-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)

comment:9 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 glib-2.54.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject3-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject3-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)

comment:10 by Douglas R. Reno, 5 years ago

Anyone shipping GDM 3.24.1 or later should consider upgrading to 3.24.3
(or 3.26.0) which fixes a security hole. namely, if the user enables
autologin, then screen lock can be bypassed by trying to initiate user
switching.

---------- Forwarded message ---------
From: Ray Strode <install-module@master.gnome.org>
Date: Tue, Sep 12, 2017 at 11:47 AM
Subject: gdm 3.24.3
To: FTP Releases <ftp-release-list@gnome.org>


About gdm
=========

Display manager and login screen

News
====

- Fix for unauthenticated unlock when autologin is enabled (CVE-2017-12164)
- Fix fallback session name sorting
- Translation updates

GDM is now a critical update. I'll work on it overnight.

comment:11 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 atk-2.26.0 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 at-spi2-atk-2.26.0 at-spi2-core-2.26.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 pygobject3-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)

pygobject-3.26.0: Fixed at r19217

atk-2.26.0: Fixed at r19217

at-spi2-atk-2.26.0: Fixed at r19217

at-spi2-core-2.26.0: Fixed at r19217

comment:12 by Douglas R. Reno, 5 years ago

libsoup has a security fix:

	* CVE-2017-2885: Fixed a chunked decoding buffer overrun that
          could be exploited against either clients or servers.
          [#785774]

comment:13 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 pyatspi-2.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 glib-networking-2.54.0 libsoup-2.60.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)

libsoup-2.60.0: Fixed at r19220

ALL USERS WHO HAVE LIBSOUP SHOULD UPGRADE TO THIS VERSION

glib-networking-2.54.0: Fixed at r19220

pyatspi2-2.26.0: Fixed at r19220

comment:14 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2 totem-pl-parser-3.26.0 adwaita-icon-theme-3.26.0 gnome-backgrounds-3.26.1)

Add overnight packages - adwaita, totem-pl-parser, and gnome-backgrounds

comment:15 by Douglas R. Reno, 5 years ago

adwaita-icon-theme-3.26.0: Fixed at r19222

gtkmm-3.22.2: Fixed at r19222

glibmm-2.54.0: Fixed at r19222

gtk+-3.22.21: Fixed at r19222

gdk-pixbuf-2.36.10: Fixed at r19222

Now off to WebKitGTK+.

comment:16 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 gdk-pixbuf-2.36.10 evolution-data-server-3.26.0 libpeas-1.22.0 gtk+3.22.21 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 glibmm-2.54.0 gtkmm-3.22.2 totem-pl-parser-3.26.0 adwaita-icon-theme-3.26.0 gnome-backgrounds-3.26.1)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1)

Update summary for completed packages.

Bruce and I have discussed creating a plaintext NEWS file for GNOME releases on Anduin. I think this is a good idea and will work well.

comment:17 by Douglas R. Reno, 5 years ago

Priority: normalhigh
Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1)GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]

As a result of CVE-2017-12164, I'm promoting this ticket to HIGH priority, pending promotion to HIGHEST as I get closer. This shouldn't take more than the next 48 hours to complete, WebKitGTK+'s cooperation permitting.

comment:18 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.0 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.1 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]

gnome-bluetooth-3.26.1 released to fix a tarball/build problem - icons were missing.

comment:19 by Douglas R. Reno, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.1 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 gjs-1.50.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.1 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]

gjs-1.50.0: Fixed at r19260

comment:20 by DJ Lucas, 5 years ago

Summary: GNOME 3.26 Platform (libgweather-3.26.0 gvfs-1.34.0 gnome-bluetooth-3.26.1 evolution-data-server-3.26.0 libpeas-1.22.0 gnome-desktop-3.26.0 yelp-3.26.0 libgtop-2.38.0 vte-0.50.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 json-glib-1.4.2 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-online-accounts-3.26.0 totem-pl-parser-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]GNOME 3.26 Platform (gvfs-1.34.0 gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]

gnome-desktop-3.26.0 fixed at r19370. libgweather-3.26.0 fixed at r19384. libgtop-2.38.0 fixed at r19383. vte-0.50.0 fixed at r19367. evolution-data-server-3.26.0 fixed at r19386. libpeas-1.22.0 at r19385. json-glib-1.4.2 fixed at r19369. gnome-online-accounts-3.26.0 fixed at r19381. totem-pl-parser-3.26.0 fixed at r19366.

comment:21 by DJ Lucas, 5 years ago

Owner: changed from Douglas R. Reno to DJ Lucas
Status: assignednew

comment:22 by DJ Lucas, 5 years ago

Summary: GNOME 3.26 Platform (gvfs-1.34.0 gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0 gnome-backgrounds-3.26.1) [GDM: CVE-2017-12164]GNOME 3.26 Platform (gvfs-1.34.0 gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0) [GDM: CVE-2017-12164]

gnome-backgrounds-3.26.2 fixed r19391.

comment:23 by DJ Lucas, 5 years ago

Summary: GNOME 3.26 Platform (gvfs-1.34.0 gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0) [GDM: CVE-2017-12164]GNOME 3.26 Platform (gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0) [GDM: CVE-2017-12164]

gvfs-1.34.1 fixed in r19392.

comment:24 by DJ Lucas, 5 years ago

Summary: GNOME 3.26 Platform (gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 nautilus-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0) [GDM: CVE-2017-12164]GNOME 3.26 Platform (gnome-bluetooth-3.26.1 yelp-3.26.0 gnome-settings-daemon-3.26.0 gnome-control-center-3.26.0 gnome-user-docs-3.26.0 gnome-session-3.26.0 gdm-3.26.0 gnome-shell-3.26.0 gnome-shell-extensions-3.26.0 mutter-3.26.0) [GDM: CVE-2017-12164]

nautilus-3.26.0 fixed in r19399.

comment:25 by DJ Lucas, 5 years ago

Resolution: fixed
Status: newclosed

Remainder of items fixed in r19401.

Note: See TracTickets for help on using tickets.