-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 23 May 2013 21:26:20 +0200 Source: gdm3 Binary: gdm3 Architecture: source amd64 Version: 2.30.5-6squeeze5 Distribution: oldstable Urgency: low Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Josselin Mouette <joss@debian.org> Description: gdm3 - Next generation GNOME Display Manager Changes: gdm3 (2.30.5-6squeeze5) oldstable; urgency=low . * Handle partial upgrades to wheezy, where a glib version that relies on x-scheme-* for URL handlers gets installed. In this case, using the defaults in /usr/share/applications leads to a security vulnerability where anyone can launch an URI handler from the greeter session. + 38_greeter_datadir.patch: modified patch from version 3.0. Add XDG_DATA_DIRS to the greeter session. + debian/applications/{mime-dummy-handler.desktop,mimeapps.list}: copied from version 3.4. The former is a dummy handler for URIs, the latter associates it with every known URI scheme. + gdm3.install: install these in /usr/share/gdm/greeter/applications Checksums-Sha1: 14a113fef98e4edd6cee862f55012efdc185f408 1888 gdm3_2.30.5-6squeeze5.dsc 1efee8317ee084dc0a9f7d5cb2aaeebe13c58eed 409960 gdm3_2.30.5-6squeeze5.debian.tar.gz e5c9dc6708d9b241c5b96f05db01268e878cf8fc 1690352 gdm3_2.30.5-6squeeze5_amd64.deb Checksums-Sha256: c8e713f627f843b0419ceb6f6ea34effaf6960e593dd90084fe9f32b46964015 1888 gdm3_2.30.5-6squeeze5.dsc b2fa8fdabd4dc902a1ff995cc09a3ca8231c9f8d5dd4d2f90612cdca553706ff 409960 gdm3_2.30.5-6squeeze5.debian.tar.gz 486852acb9d5f30ec1ac67f8e5790b85945424e20248b95e5eb692cee394886d 1690352 gdm3_2.30.5-6squeeze5_amd64.deb Files: 90c73635fcbd0449881618c72d14428b 1888 gnome optional gdm3_2.30.5-6squeeze5.dsc 581dfc9073854e55847d097e30b75910 409960 gnome optional gdm3_2.30.5-6squeeze5.debian.tar.gz 6a7bb72d7b72419a8f4e4ee1a299baa9 1690352 gnome optional gdm3_2.30.5-6squeeze5_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRnogErSla4ddfhTMRAkixAKDUPDVcFwvIQwETF1V+M7iOBQ4CvgCePyhu u8sBt0hT4OFBFVYn5cx0Rrc= =YVGz -----END PGP SIGNATURE-----