The GNOME project released maintenance version 50.4 (plus a backport as 49.9) on 5 August 2026. The focus is on several fixed security flaws in the GDM login manager, along with noticeable improvements to display handling.
The GDM security fixes
- Path traversal: a compromised greeter could load arbitrary
.desktopfiles via the SelectSession interface. - Autologin bypass: through
BeginAutoLogin, automatic login could be requested for local accounts using arbitrary usernames. - Denial of service: an invalid session name could terminate the entire GDM daemon, ending all active sessions.
In addition, cached plaintext passphrases are now wiped from memory before release, and new bounds checks prevent out-of-bounds reads in the keyring buffers. For systems with a graphical login, these fixes are the most important reason to update promptly.
Better rendering with Mutter 50.4
The Mutter compositor fixes blurred rendering on monitor configurations not perfectly aligned to physical pixels and stops advertising unsupported fallback modes. Invalid redraw regions on rotated displays were also corrected, and HDR output now populates the mastering-display metadata correctly. On top of that come polish for menu animations and a fixed sound glitch in the Shell.
Sources: Linuxiac, linuxcompatible.org.
