2007-07-30 Brian Cameron * Release 2.16.7: * NEWS: Updated. 2007-07-30 Brian Cameron This fixes CVE-2007-3381 - a denial of service attack where the user can crash the GDM daemon with a carefully crafted GDM sockets command and cause GDM to stop managing future displays. * daemon/gdm.c, daemon/gdmconfig.c, gui/gdmconfig.c, gui/gdmflexiserver.c, gui/gdmconfig.c: Fix g_strsplit calls so that NULL return codes are better handled.