There is 1 open security issue in sid.
There is 1 open security issue in forky.
commit 57841d4b335da9a2e8f9f4f2e0d32c60632e046e
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Mon Jan 12 10:09:25 2026 +0100
d/control: Bump minimum gnome-shell and gnome-session
Required by the new shell mode logic
commit 01b3f7b90057ae69312a958bbb5c64ea47973eb8
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Mon Jan 12 09:51:14 2026 +0100
d/symbols: Update symbols
commit 1eab9bdfb315799b91235601524f6cce0e920d32
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Mon Jan 12 09:44:03 2026 +0100
d/install: Add new installed files
commit 84811e83fa7519c2a75336cae4b5dc1ebf022883
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Mon Jan 12 09:35:05 2026 +0100
d/install: Cleanup non existing files
commit 3c8ccf46a2d3b8678d9475a4adea3c0d6a5b3b30
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Fri Jan 9 18:24:02 2026 +0100
d/rules: Stop deleting source files in clean
These are not generated files anymore.
Furthermore, with meson they would be generated in the build directory and not
the source directory.
data/gdm.schemas is now a source file, which was incorrectly being removed.
commit 6c77671c929aeed8d53c804425beaf515c073fd6
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Fri Jan 9 18:10:24 2026 +0100
d/rules: Drop unused configuration options
commit cae4a51284b1b640fa422cdcff08cae6326a28a5
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Fri Jan 9 17:36:15 2026 +0100
d/p: Rebase all other patches
commit f8b4870b8683ebea7b384a8fa9b5e9d69fd548b3
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Thu Jan 8 18:22:57 2026 +0100
d/p/94_retain_xorg_log.patch: Drop unused patch
This patch was only affecting the rootful Xorg sessions, while GDM now only
supports launching rootless Xorg sessions.
commit 2144c69b9fa3a4d7fa11f2809514c974c602a3da
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Thu Jan 8 18:21:12 2026 +0100
d/p/16_xserver_path.patch, d/rules: Drop patch not necessary anymore
GDM now looks for an X server at runtime, not at build time
commit 309f491dad1b9ff812479da152d73cde85a86b3f
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Thu Jan 15 17:21:09 2026 +0100
New upstream release
commit 57a920da59cc3baf2f7b52dea7f9e0c380361098
Merge: 2644d1219 f000a9ebd
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Thu Jan 15 17:17:58 2026 +0100
Merge tag 'upstream/50_alpha.1' into debian/latest
Upstream version 50~alpha.1
commit 2644d1219b0aa11103a9151e057fa673beeb5af0
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date: Sun Dec 28 09:29:54 2025 -0500
releasing package gdm3 version 49.2-3
commit b233295b2b4c14a2e20d6f46de9dc475731cda90
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date: Sun Dec 28 09:26:12 2025 -0500
Remove references to mips64el
no longer a Debian architecture
https://lists.debian.org/debian-devel-announce/2025/11/msg00001.html
commit aa84a8187df2cad14ad799859fbbc1f2346118f1
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date: Sun Dec 28 09:24:19 2025 -0500
Bump Standards Version to 4.7.3
commit dc9120f008e633163196e0d7c1255de64983635c
Author: Jeremy Bícha <jbicha@ubuntu.com>
Date: Sun Dec 28 09:07:55 2025 -0500
Remove Recommends: xserver-xorg
Sessions that need xorg need to depend on it themselves
commit 278ab59024dd07c004b27a755b3ec727b06b01d4
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Mon Dec 15 13:13:48 2025 +0100
d/tests: Add autopkgtest verifying that the greeter registers
commit 9ea3300cabd8dbda3beacf24122b8186a7b87140
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Dec 12 17:34:48 2025 -0500
Remove unnecessary direct Depends: gnome-pkg-tools
already has Build-Depends: dh-sequence-gnome
commit e649a6733e078f33ceab987f3280fe7a84c8bb52
Author: Jeremy Bícha <jbicha@debian.org>
Date: Wed Dec 3 22:34:20 2025 -0500
releasing package gdm3 version 49.2-2
commit d7b36f8bd0e6ed2dd22cb0606a0d85f61e46afe2
Author: Jeremy Bícha <jbicha@debian.org>
Date: Wed Dec 3 22:29:03 2025 -0500
Remove support for DEB_BUILD_OPTIONS=debug
It's not listed at
https://wiki.debian.org/BuildProfileSpec
although it is in use
https://codesearch.debian.net/search?q=path%3Adebian%2Frules+debug.*DEB_BUILD_OPTIONS&literal=0
It seems to be almost completely unused for meson packages:
https://codesearch.debian.net/search?q=path%3Adebian%2Frules+buildtype%3Ddebug
It this is desired, I suggest adding support for it directly
in debhelper's meson.pm so that it can easily be used for any meson package
commit 99e68dacd4f5d74e279bac9e57de18ed5184cd12
Author: Jeremy Bícha <jbicha@debian.org>
Date: Wed Dec 3 22:15:24 2025 -0500
Clean up debian/rules
commit 3b50474268ca901a24a0ad4ddde0622574d30c05
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Tue Aug 5 09:44:51 2025 +0200
d/control: Drop dependency on dbus-daemon
With GDM switching the greeter to dynamic systemd users, it no longer uses
dbus-run-session to start a dbus session.
commit a2d0f92f6775ca70dcffe30c0213072657a24df6
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:51:08 2025 -0500
releasing package gdm3 version 49.2-1
commit a031f3f3000ee4e10a11650c02a4bbb0aeafce03
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:48:02 2025 -0500
Remove obsolete details from README.Debian
Remove a lot of X11 specific details
In particular we no longer provide custom-x11-session.desktop
There still is
yelp help:system-admin-guide/session-custom
but it recommends creating an X11 session to run GNOME Classic
which won't work since GNOME and GNOME Classic are Wayland only
commit 8913ae4049151e87ad16edce7b5b902c9128772e
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:38:25 2025 -0500
Remove obsolete Conflicts/Replaces
commit 0c153181efd457b84fe7cc4fcf7ac9dbc9accafc
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:38:11 2025 -0500
Fix some build warnings
commit dbd6b57ae045a8656efefd86bbff92e1d5334319
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:37:31 2025 -0500
Remove obsolete Rules-Requires-Root: no field
default since trixie
commit 45fce0ce03f750bc5b01b5a7bb1544848183a2fb
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Nov 7 12:35:10 2025 -0500
Use upstream's Xsession file (with some patching as mentioned above)
Closes: #1120328
commit 523df8b36bc9e539b31dfaa977a505c50730cc18
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Nov 7 13:10:21 2025 -0500
Fix what appears to be a mistake in the Xresources patch description
commit ce7910753d066e9483f2eaac77a06706c205fcac
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Nov 7 13:08:19 2025 -0500
Add patch from Ubuntu to handle /etc/X11/Xresources/*
commit cbbf5b10f311e70f41b3c896146d6a3a866d0675
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Nov 7 13:03:54 2025 -0500
Add patch from Ubuntu to use x-terminal-emulator instead of xterm
commit dd3a989489d4c84092c348dc9d2989107e9ef5cb
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Nov 7 12:39:06 2025 -0500
Add patch from Ubuntu to have Xsession run scripts from /etc/X11/Xsession.d
commit 23a177311dfcc5c5ed3b5e8659d3599b1d0fa738
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Nov 7 12:29:26 2025 -0500
Add patch to support Debian's Xsession.options.d
commit 7c430f77bcffb6c85ea8a32a38eeb5e8e8a19e98
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:32:02 2025 -0500
New upstream release
commit 965d99e83d771a7478a7b5bfcaaa98431eac08b5
Merge: 632e895fe 01c29137a
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:32:02 2025 -0500
Update upstream source from tag 'upstream/49.2'
Update to upstream version '49.2'
with Debian dir 45b77b8c2bd1e6890527d23596fdea0a2b4eb601
commit 632e895fee746e4f8dfd2200aa563021d16ab067
Author: Jeremy Bícha <jbicha@debian.org>
Date: Mon Nov 24 19:31:26 2025 -0500
Update changelog
commit 8226392c423c813d49718970db306121441c9940
Author: Jeremy Bícha <jbicha@debian.org>
Date: Fri Nov 7 06:00:05 2025 -0500
Disable xdmcp; this feature is being removed for GNOME 50 anyway
xdmcp has been removed for GNOME 50
https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/327
An alternative is using gnome-remote-desktop which has allowed
for headless remote access using RDP since GNOME 46
You can read technical details of that feature at
https://www.suse.com/c/headless-remote-sessions-in-gnome-part-1/
commit da6d202512bcfedbe18d7ec64a657aa7a1229d24
Author: Jeremy Bícha <jbicha@debian.org>
Date: Thu Nov 6 18:56:17 2025 -0500
Remove obsolete Recommends: xserver-xephyr
Closes: #792220
commit 57ea851576ac84cc5f37c6ffd8cf7835872355d6
Author: Simon McVittie <smcv@debian.org>
Date: Fri Oct 31 19:14:47 2025 +0000
Release to unstable
commit b830860e2f8c193fae13c2a0072f89512a58d4b1
Author: Simon McVittie <smcv@debian.org>
Date: Fri Oct 31 18:54:13 2025 +0000
d/Xsession, d/gdm3.install, d/rules: Restore ability to launch X11 sessions
Commit 11802ed9 "Completely stop providing Debian custom xsession support"
removed the example of a non-package-manager-provided X11 session, but
also removed the ability to launch X11 sessions at all: all sessions
that do not have X-GDM-BypassXsession in their .desktop file require
an Xsession script, which was historically provided by Debian rather
than by upstream. Restore that functionality.
In a future upload we should look at whether we can use /etc/X11/Xsession
as-is, but let's get the GNOME 49 transition done first.
commit 5661fef69fb303cff48b602a980db111e8f02f10
Author: Simon McVittie <smcv@debian.org>
Date: Fri Oct 31 18:12:15 2025 +0000
Release to unstable
commit 52647047af0b0e12b2e63cc0d3b871aa0925857a
Author: Simon McVittie <smcv@debian.org>
Date: Fri Oct 31 18:11:18 2025 +0000
d/control: Increase gnome-session-{bin,common} dependency to 49
The new version of gdm doesn't start successfully with the old
gnome-session. The new gnome-session-bin already Breaks the older gdm3,
but the new gdm3 didn't yet force installation of the new gnome-session.
Closes: #1119809
commit 91c63a07ae526e230e59d10fe6ec235e62683ca3
Author: Simon McVittie <smcv@debian.org>
Date: Fri Oct 31 10:53:25 2025 +0000
Release to unstable (transition: #1116394)
commit 62958a0f18fb5df915184afffb401dfbcfa9aa35
Author: Simon McVittie <smcv@debian.org>
Date: Mon Oct 27 16:51:40 2025 +0000
Release to experimental
commit aff7f3c110b1787ca6d12d7d4470052786e8bcb0
Author: Simon McVittie <smcv@debian.org>
Date: Mon Oct 27 16:51:08 2025 +0000
d/control: Remove :native annotation from dconf-cli
Now that dconf-cli is Multi-Arch: foreign, this is unsatisfiable.
This partially reverts commit da3e7f13fafa44de31780bdb8fe019906c569d94.
commit bcde741729a603537066d48dce8b8db88ad0786f
Author: Simon McVittie <smcv@debian.org>
Date: Mon Oct 27 15:18:35 2025 +0000
Release to experimental
commit c4d4b92c728fdffd9351fbb10eeac516014d75cc
Author: Simon McVittie <smcv@debian.org>
Date: Mon Oct 27 14:08:48 2025 +0000
d/greeter.dconf-defaults: Mention the accent colour option
When we reach the forky freeze and background/branding images become
available in desktop-base, we might want to set this to a coordinating
colour (see #1105056). Until then, leave the default commented-out.
commit c7b4ad97e6564df69491629fe5b99240688cde2a
Author: Simon McVittie <smcv@debian.org>
Date: Mon Oct 27 14:07:24 2025 +0000
d/greeter.dconf-defaults: Improve documentation a bit
commit ba9f892b615aab2ebf8238cfc9a192449de47220
Author: Simon McVittie <smcv@debian.org>
Date: Mon Oct 27 13:50:11 2025 +0000
d/control: Depend on a version of libnss-systemd with #1118640 fixed
Otherwise, looking up the gdm-greeter* dynamic users in shadow/gshadow
will not work on systems that were installed as Debian 11 or older, and
then upgraded.
Closes: #1116563, #1118454
LP: #2121017
commit 77925c70b67ae33535fb2694a22a90b61345513b
Author: Simon McVittie <smcv@debian.org>
Date: Tue Oct 14 10:28:54 2025 +0100
Release to experimental
commit 55e67f86fabf39df7e5abb297d32c0a1b1d073d8
Author: Simon McVittie <smcv@debian.org>
Date: Tue Oct 14 10:26:49 2025 +0100
Update changelog
commit acad78fda695e865b90151250b26fcdcea1a4658
Author: Simon McVittie <smcv@debian.org>
Date: Tue Oct 14 10:25:34 2025 +0100
Refresh patch series
Gbp-Dch: ignore
commit d47a090f37d96e9ff597f18a82cc19c71ac8a038
Merge: 25e867baa fddab174f
Author: Simon McVittie <smcv@debian.org>
Date: Tue Oct 14 10:24:58 2025 +0100
Merge remote-tracking branch 'origin/debian/latest' into debian/latest
commit 25e867baa77e257c40419169b069380192371e02
Author: Simon McVittie <smcv@debian.org>
Date: Tue Oct 14 10:17:18 2025 +0100
New upstream release
commit a7a70a8a688f4f6858288b141a587953b86b4279
Merge: 3d7280d2a 202666804
Author: Simon McVittie <smcv@debian.org>
Date: Tue Oct 14 10:17:18 2025 +0100
Update upstream source from tag 'upstream/49.1'
Update to upstream version '49.1'
with Debian dir e593bbb9883ce4dcd7988066b423d7bdedfd885c
commit fddab174fb39d3a6f3cd82ba03060aff1f060b1d
Author: Luca Boccassi <luca.boccassi@gmail.com>
Date: Fri Sep 26 23:33:47 2025 +0100
Do not patch out display-manager.service alias
This is needed so that presets can enable the manager, and also as
a pre-greeter synchronization point (eg: for firstboot services that
provision users).
The custom debconf-based mechanism does not conflict with this,
as it does the same thing: create and remove symlinks.
Other managers already use it and leave it in place:
https://sources.debian.org/src/lightdm/1.32.0-6/debian/lightdm.service
https://sources.debian.org/src/sddm/0.21.0%2Bgit20250502.4fe234b-2/debian/sddm.service
https://sources.debian.org/src/wdm/1.28-27/debian/wdm.service
Closes: #1025349
commit 3d7280d2abd2c561454ebba5cbdee5ccf9fdc6ac
Author: Jeremy Bícha <jbicha@debian.org>
Date: Tue Sep 16 20:48:39 2025 -0400
releasing package gdm3 version 49.0.1-1
commit 11802ed9933ac59ee3ebd52f6d67caaabdd0232a
Author: Jeremy Bícha <jbicha@debian.org>
Date: Tue Sep 16 20:36:12 2025 -0400
Completely stop providing Debian custom xsession support
commit 1f440d05387ce0fb0398092faff01543237e8913
Author: Jeremy Bícha <jbicha@debian.org>
Date: Tue Sep 16 20:30:56 2025 -0400
udev rules are no longer installed
commit 163b71d47fef87597f7ff3a4beda255c0cfa7f03
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Thu Sep 4 11:46:11 2025 +0200
d/rules: Restore working-dir meson option
The working-dir is now used again to store per-seat greeter settings.
This partially reverts commit 360e6dac6
https://gitlab.gnome.org/GNOME/gdm/-/merge_requests/315
commit f832c8cb138c0060a1fc35f282a9afbc0561dcf5
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Tue Aug 5 10:16:29 2025 +0200
d/rules: Drop meson options working-dir, screenshot-dir, ran-once-marker-dir
These options do not exist anymore:
* working-dir is made obsolete by switching to dynamic users
* screenshot-dir is made obsolete by the removal of gdm-screenshot
* ran-once-marker-dir has been unused for 10 years
commit 4a4250f885a2712c28fc829c5fb43ce395b5aeac
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Mon Aug 18 12:36:40 2025 +0200
Revert "d/patches: Add patch from upstream 49.alpha.0 to fix FTBFS in C23 mode"
This is already included in 49~beta upstream.
This reverts commit 950df54d06d7b3ad84ccaf9576b9e440b1c54804.
commit 20e8d32a1c3de1d913dbe678a33068b173a5d127
Author: Alessandro Astone <alessandro.astone@canonical.com>
Date: Tue Aug 5 10:21:25 2025 +0200
d/libgdm1.symbols: Add new symbols
commit f9cf43fa0d3404c096384a19c8c676a498d38c99
Author: Daniel van Vugt <daniel.van.vugt@canonical.com>
Date: Mon Sep 1 17:20:38 2025 +0800
Make gdm3 depend on libnss-systemd (LP: #2121017)
commit 788c06faa166a863324077a02594939d1c5a2356
Author: Jeremy Bícha <jbicha@debian.org>
Date: Tue Sep 16 19:14:32 2025 -0400
New upstream release
commit 855b6362d6b9ab2ea026348a82783d2706713d8a
Merge: 2044df7db 1d0a0b0b2
Author: Jeremy Bícha <jbicha@debian.org>
Date: Tue Sep 16 19:14:32 2025 -0400
Update upstream source from tag 'upstream/49.0.1'
Update to upstream version '49.0.1'
with Debian dir 2d9ce2b0b3df83499e23d80c812461747b37831a
commit 2044df7db2b979421bff73803291684f6dc550f6
Author: Simon McVittie <smcv@debian.org>
Date: Fri Aug 15 10:54:39 2025 +0100
Release to unstable
commit da3e7f13fafa44de31780bdb8fe019906c569d94
Author: Simon McVittie <smcv@debian.org>
Date: Fri Aug 15 10:19:57 2025 +0100
d/control, d/rules: Let the package be cross-compiled
debhelper currently uses debcrossgen which does not support cross
GObject-Introspection, so for now we need to opt-in to using
`meson env2mfile` instead.
We need to run dconf-cli from the build architecture, since we will be
unable to run it from the host architecture in general.
commit de44c32ecf32a48737e1d89ed8931b8a07dfcee4
Author: Simon McVittie <smcv@debian.org>
Date: Fri Aug 15 01:14:09 2025 +0100
Update changelog
commit ade174bfe73b81ac80b4a707f7be241304846429
Author: Simon McVittie <smcv@debian.org>
Date: Fri Aug 15 01:12:05 2025 +0100
d/gdm3.postrm, d/control: Don't delete system user/group during purge
Last time this was discussed (in #1006912), and in older discussions
dating back to 2004, there seemed to be consensus that removing uids
is dangerous because there might still be files owned by that uid on
the filesystem, causing unintended access to be granted if the uid
is subsequently reused for a different system user.
This also means we can drop the adduser dependency (which in fact
wasn't enough to guarantee the presence of deluser/delgroup during
purge anyway).
commit 73fb07cb875d4fc70bbe38e285acf233c55bf213
Author: Simon McVittie <smcv@debian.org>
Date: Fri Aug 15 00:55:28 2025 +0100
Update changelog
commit f6761d16c164d902692838ee9bfc8f763bfcb627
Author: Simon McVittie <smcv@debian.org>
Date: Fri Aug 15 00:38:18 2025 +0100
Activate dh_installsysusers declaratively rather than imperatively
This lets debhelper choose a good point in the sequence for it.
commit 5bfce27e11c0ec1506d25a6c7e66cf7a426e75de
Merge: 7fd9435aa 0dd7abb89
Author: Simon McVittie <smcv@debian.org>
Date: Fri Aug 15 00:36:36 2025 +0100
Merge remote-tracking branch 'merge-requests/28' into debian/latest
commit 7fd9435aa9be0e828328bdd8f2c9b3725e692bb4
Author: Simon McVittie <smcv@debian.org>
Date: Thu Aug 14 23:57:58 2025 +0100
Build-depend on gir1.2-*-dev instead of libgirepository1.0-dev
libgirepository1.0-dev is not Multi-Arch co-installable and should be
phased out during the forky release cycle.
commit 1546e0e4a7ad2af5cc3cddda5bdc14ba791c47dc
Author: Simon McVittie <smcv@debian.org>
Date: Thu Aug 14 23:56:08 2025 +0100
Standards-Version: 4.7.2 (no changes required)
commit 267d51179e1d5350fafe8ba2e034f20482bf3cc1
Author: Simon McVittie <smcv@debian.org>
Date: Thu Aug 14 23:55:47 2025 +0100
d/copyright: Don't quote the FSF's former postal address
commit 0dd7abb89bebe31f9013ca1312e7c4302a22cbef
Author: Luca Boccassi <bluca@debian.org>
Date: Thu Jun 12 00:32:30 2025 +0100
Use sysusers.d file for Debian-gdm
Leave the adduser dependency and the user/group deletion as-is
in the postrm, as it's pre-existing. It can be dropped later
if no longer needed.
Shipping a sysusers file allows to install usr-only images with
an ephemeral/factory reset/firstboot /etc/.
Closes: #1107682
commit 194bb60c780be142ba5b870ae76ce6b4f24efe35
Author: Simon McVittie <smcv@debian.org>
Date: Sun Jul 13 20:08:48 2025 +0100
Release to unstable
commit 7f59b483e952a9857bcbbeb31d171c65c0f835c8
Author: Simon McVittie <smcv@debian.org>
Date: Sun Jul 13 19:44:54 2025 +0100
Update changelog
commit 950df54d06d7b3ad84ccaf9576b9e440b1c54804
Author: Simon McVittie <smcv@debian.org>
Date: Sun Jul 13 19:41:21 2025 +0100
d/patches: Add patch from upstream 49.alpha.0 to fix FTBFS in C23 mode
This won't become relevant until gcc 15 becomes the default during
the forky cycle, but is a harmless change while we're uploading anyway.
Closes: #1096689
commit 2c578f57f5cd237fb9d02491e53d24c3cd6c93d1
Author: Simon McVittie <smcv@debian.org>
Date: Thu Jul 10 14:48:49 2025 +0100
Update changelog
commit a282369756946506a53b1ec55f8a2009af7c5ba2
Author: Simon McVittie <smcv@debian.org>
Date: Thu Jul 10 14:47:37 2025 +0100
d/greeter.dconf-defaults: Disable smartcard authentication by default
Enabling smartcard authentication has side-effects on other aspects of
greeter behaviour if a compatible smartcard happens to be connected:
in particular, it disables the user list, resulting in users being
required to type their username to log in.
Enrolling smartcards to be used for authentication requires sysadmin
action, so it seems reasonable to require the sysadmin to take action
to enable it after they have done the necessary enrolment step.
Closes: #1051785
commit dc6ab49be2bfdd730a8a7176020217cafc1dbd8d
Author: Simon McVittie <smcv@debian.org>
Date: Thu Jul 10 14:44:49 2025 +0100
d/gdm3.alternatives: Make gdm-smartcard-sssd-or-password the default
With the previous default, gdm-smartcard-sssd-exclusive, if a smart
card was plugged in and libpam-sss was installed, we would reject
attempts to log in with a password. This is the most-hardened choice
if smart cards are being used for authentication, but prevents login if
the smart card has not been enrolled for authentication and is actually
being used for some other purpose such as OpenPGP or X509.
Closes: #1051785
commit 4ff9fea9e9fb8812cf637abd31b27f6ec4e4331a
Author: Simon McVittie <smcv@debian.org>
Date: Thu Jul 10 14:39:44 2025 +0100
d/greeter.dconf-defaults: Add some useful example options
Disabling fingerprint authentication is one of the examples given in
the GNOME System Administration Guide. The steps from that guide won't
actually work as-is on Debian (because we use a different username for
the greeter, #1107944) but we can make it as easy as possible to do
the equivalent.
Meanwhile, disabling smartcard authentication is a way to avoid the
presence of a smartcard having the side-effect of disabling the user
list, and in some configurations also the ability to log in with a
password (#1051785).
Helps: #1105057, #1051785
commit 3028b5eb9aa444ee0c9e576798c435fa9378e8c9
Author: Simon McVittie <smcv@debian.org>
Date: Thu Jul 10 14:29:48 2025 +0100
d/greeter.dconf-defaults: Remove non-functional theming options
The visual design of the greeter (login prompt) is no longer intended
to be configurable, and in particular the background is no longer
configurable, so none of the background-related settings have any effect.
The greeter also does not use GTK, so changing the GTK theme has no
effect on it.
Remove these options from the default configuration file so that they
will not mislead sysadmins.
Closes: #1105057
commit 16c8a4290f7c532b9b54c44420861cc1e2b8e159
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Mar 17 12:34:07 2025 -0400
releasing package gdm3 version 48.0-1
commit 66c9ea6b82201d975b670b3a8aebe32e5e635b8b
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Mar 17 12:30:15 2025 -0400
debian/gdm3.install: Install polkit rules to allow changing
global network settings from the login screen
LP: #2098016
Gbp-Dch: Full
commit 162310d53c08451002989277698918be4a5addeb
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Mar 17 12:24:53 2025 -0400
New upstream release
commit ba8ab771c133a23c330fbf9d38a6db90bc4c4f79
Merge: 753084350 2c440ac66
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Mar 17 12:24:53 2025 -0400
Update upstream source from tag 'upstream/48.0'
Update to upstream version '48.0'
with Debian dir 6e3a08384725ea75cb595bf89c858fe872eb4f6e
commit 7530843505411fe25b8882a0483f3a2080110f6b
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Feb 10 10:50:56 2025 -0500
releasing package gdm3 version 48~beta-1
commit 4e71e97ce7838f2acec70b1c20e826fa6b1110eb
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Feb 10 10:46:54 2025 -0500
Add Lintian override for broken Lintian info warning
commit 6c97b3a8e7c4137e7f99a3fb00cc2ca816b03e1d
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Feb 10 10:41:37 2025 -0500
Remove gsettings schema patch: applied in new release
commit 2ebf431ea86dac8221cd8f30c50c68e10fb83429
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Feb 10 10:41:14 2025 -0500
New upstream release
commit c1b75ec8f0f0760f7e6fe5ab70ac4777e93a4391
Merge: bf6fb1068 d19ffa483
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Mon Feb 10 10:41:14 2025 -0500
Update upstream source from tag 'upstream/48_beta'
Update to upstream version '48~beta'
with Debian dir 0ed0b07925f602046a5b3ce42b84c2600b188a9b
commit bf6fb10685756bd7dd384d7ca92368f82dbdd0fe
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Wed Feb 5 08:28:11 2025 -0500
Update changelog
commit c4c370e745c87bbc7a6381b2ef7351d7aefe86db
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Wed Feb 5 08:27:48 2025 -0500
Revert "Temporarily revert changes accidentally missed from today's upload"
This reverts commit 8a45fa896f85e42cc38ca86a40f76efe8851786c.
commit 326e61606bab3ba8c82158a005a1b315a62b7f4e
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Wed Feb 5 08:25:08 2025 -0500
releasing package gdm3 version 47.0-4
commit f6f32356c378bcc7b92f83dc14d967084e449ee9
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Wed Feb 5 08:11:31 2025 -0500
Cherry-pick gsettings schema addition required by GNOME Shell 48 Beta
commit 8a45fa896f85e42cc38ca86a40f76efe8851786c
Author: Jeremy Bícha <jeremy.bicha@canonical.com>
Date: Wed Feb 5 08:27:12 2025 -0500
Temporarily revert changes accidentally missed from today's upload
commit efa94b86ea5fd87f87b1f923278669f59f98f13f
Author: Marco Trevisan (Treviño) <mail@3v1n0.net>
Date: Thu Jan 9 02:56:05 2025 +0100
d/tests/sssd-gdm-smartcard-pam-auth-tester.sh: Honor PIN env variable in WAIT mode
Gbp-Dch: Ignore
commit 2af3227ef62dbf494fe933d7c9392218d9b6fe31
Author: Marco Trevisan (Treviño) <mail@3v1n0.net>
Date: Thu Jan 9 02:38:21 2025 +0100
debian/tests/sssd-gdm: Sync with upstream cleanups
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.
Among the 10 debian patches available in version 49.2-3 of the package, we noticed the following issues:
There is 1 open security issue in trixie.
There is 1 open security issue in bookworm.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/g/gdm3.png){kind=link}