2007-07-30 Brian Cameron <
[email protected]>
* Release 2.16.7:
* NEWS: Updated.
2007-07-30 Brian Cameron <
[email protected]>
This fixes CVE-2007-3381 - a denial of service attack where
the user can crash the GDM daemon with a carefully crafted GDM
sockets command and cause GDM to stop managing future displays.
* daemon/gdm.c, daemon/gdmconfig.c, gui/gdmconfig.c,
gui/gdmflexiserver.c, gui/gdmconfig.c: Fix g_strsplit calls
so that NULL return codes are better handled.