Bug 2108592

Summary: lightdm-1.32.0 is not available for EPEL/RHEL8
Product: [Fedora] Fedora EPEL Reporter: k_sinoha
Component: lightdmAssignee: Alternative GTK desktop environments <alt-gtk-de-sig>
Status: NEW --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: epel8CC: alt-gtk-de-sig, gp, k_sinoha, leigh123linux, raveit65.sun, rdieter, tdawson
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description k_sinoha 2022-07-19 12:05:46 UTC
Current version/release in EPEL: 1.30.0-6

https://dl.fedoraproject.org/pub/epel/8/Everything/x86_64/Packages/l/lightdm-1.30.0-6.el8.x86_64.rpm


URL: https://github.com/CanonicalLtd/lightdm

lightdm-1.32.0 is now available.
Please update lightdm EPEL/RHEL8 package.

Comment 1 Troy Dawson 2022-07-22 13:17:14 UTC
EPEL is not Fedora, or Ubuntu.  It is meant to be stable and not updated all the time.
Why do you want version 1.32?

Comment 2 k_sinoha 2022-07-22 15:18:08 UTC
I want to use lightdm 1.32 because there are security issues with lightdm 1.30.

The NEWS of lightdm 1.32 (https://github.com/canonical/lightdm/blob/main/NEWS) has the following description:
---
Overview of changes in lightdm 1.32.0

    * Overwrite existing X authority files to avoid corruption
---
The X authority file is an important file related to authentication.
There is a bug where overwriting that file corrupts the existing X authority file.

Comment 3 k_sinoha 2022-07-22 15:25:14 UTC
Lightdm 1.30 has a bug that corrupts the X authority file.
Lightdm 1.32 fixed this bug.

Comment 4 Troy Dawson 2022-07-22 15:26:28 UTC
That sounds like a good reason.  Thank you for bringing it to my attention.
I'll get started on it, and make sure the various other packages that depend on it get updated and/or rebuilt.

Comment 5 leigh scott 2022-07-22 19:11:52 UTC
(In reply to Troy Dawson from comment #4)
> That sounds like a good reason.  Thank you for bringing it to my attention.
> I'll get started on it, and make sure the various other packages that depend
> on it get updated and/or rebuilt.

Why?, it's already patched.

https://src.fedoraproject.org/rpms/lightdm/c/516be29489b1e6f4b2c1834867701ad33edf59c0?branch=epel8


There maybe new issues with 1.32.0

https://bugzilla.redhat.com/show_bug.cgi?id=2109315

Comment 6 Troy Dawson 2022-07-22 19:34:53 UTC
(In reply to leigh scott from comment #5)
> (In reply to Troy Dawson from comment #4)
> > That sounds like a good reason.  Thank you for bringing it to my attention.
> > I'll get started on it, and make sure the various other packages that depend
> > on it get updated and/or rebuilt.
> 
> Why?, it's already patched.
> 
> https://src.fedoraproject.org/rpms/lightdm/c/
> 516be29489b1e6f4b2c1834867701ad33edf59c0?branch=epel8
> 
> 
> There maybe new issues with 1.32.0
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=2109315

Thank you Leigh.
I had seen the 1.32.0 bug, which was why I was reluctant to update.
But I hadn't looked at the spec file yet to see that the xauthority issue had already been patched.