src/wdm/daemon.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix gnu/kfreebsd build.
Bug-Debian: http://bugs.debian.org/417865

src/wdm/Greet.c | 5 4 + 1 - 0 !
1 file changed, 4 insertions(+), 1 deletion(-)

 increase the size of buffers for name/password to follow the protocol.
Cleanup name/password buffers before use.
Bug-Debian: http://bugs.debian.org/276218.

configure | 6 3 + 3 - 0 !
configure.ac | 6 3 + 3 - 0 !
2 files changed, 6 insertions(+), 6 deletions(-)

 add needed libs and filter out some unneeded.

doc/wdm.man.in | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 cosmetic patch to manpage.
Bug-Debian: http://bugs.debian.org/319574

Makefile.in | 16 8 + 8 - 0 !
po/fr.po | 180 180 + 0 - 0 !
po/fr_FR.po | 180 0 + 180 - 0 !
3 files changed, 188 insertions(+), 188 deletions(-)

 rename fr_fr locale to fr
Bug-Debian: http://bugs.debian.org/336806

src/wdmLogin/Login.c | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 fixed to work with composite extension
Bug-Debian: http://bugs.debian.org/488715, http://bugs.debian.org/547251

Makefile.in | 12 6 + 6 - 0 !
etc/Howto.conf.in | 12 6 + 6 - 0 !
2 files changed, 12 insertions(+), 12 deletions(-)

 fix ftbfs with ld --as-needed.
Bug-Debian: http://bugs.debian.org/556673

doc/wdm.man.in | 2 1 + 1 - 0 !
src/wdm/genauth.c | 35 12 + 23 - 0 !
src/wdm/resource.c | 2 1 + 1 - 0 !
3 files changed, 14 insertions(+), 25 deletions(-)

 use /dev/urandom instead of /dev/mem
Bug-Debian: http://bugs.debian.org/700422

Borislav Petkov:

wdm still uses /dev/mem in genauth.c to generate a tmp key and it
shouldn't. The kernel currently allows userspace to read < 640K of 
/dev/mem for compatibility reasons with X. The modern way of getting 
two random longs is /dev/urandom and I've a patch below which
converts wdm to do that.

src/wdm/session.c | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 open the pam session in the parent process.
 This is necessary when logind is running. pam_systemd communicates with logind
 and sets up a file descriptor that represents the session. When this file
 descriptor is closed, logind will close the session and kill all processes as
 part of that. The file descriptor is marked CLOEXEC, so without this patch,
 the file descriptor gets opened, then wdm exec()s the session and the file
 descriptor is closed, leading to logind immediately killing the session.
 This patch makes wdm do PAM session handling the same way that xdm does it.
Last-Updated: 2013-08-28

doc/wdm.man.in | 4 2 + 2 - 0 !
doc/wdmLogin.man | 6 3 + 3 - 0 !
src/wdm/choose.c | 2 1 + 1 - 0 !
3 files changed, 6 insertions(+), 6 deletions(-)

 miscellaneous spelling fixes reported by lintian