2007-07-30  Brian Cameron  <[email protected]>

       * Release 2.16.7:
       * NEWS: Updated.

2007-07-30  Brian Cameron  <[email protected]>

       This fixes CVE-2007-3381 - a denial of service attack where
       the user can crash the GDM daemon with a carefully crafted GDM
       sockets command and cause GDM to stop managing future displays.

       * daemon/gdm.c, daemon/gdmconfig.c, gui/gdmconfig.c,
         gui/gdmflexiserver.c, gui/gdmconfig.c: Fix g_strsplit calls
         so that NULL return codes are better handled.