summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorBrian Cameron <brian.cameron@sun.com>2007-07-30 19:38:25 +0000
committerBrian Cameron <bcameron@src.gnome.org>2007-07-30 19:38:25 +0000
commit487610bdc571b76c0b144e52826e2f8aa9164693 (patch)
treea22a921aa8bb64c644cc1b42dc3f2e2c355c5704
parentede0aee30bfcfec7aece247b44d0e98c2829eb4a (diff)
downloadgdm-487610bdc571b76c0b144e52826e2f8aa9164693.tar.gz
Updated.
2007-07-30 Brian Cameron <brian.cameron@sun.com> * Release 2.16.7: * NEWS: Updated. svn path=/branches/gnome-2-16/; revision=5101
-rw-r--r--ChangeLog5
-rw-r--r--NEWS8
-rw-r--r--configure.ac2
3 files changed, 14 insertions, 1 deletions
diff --git a/ChangeLog b/ChangeLog
index ce2c4adb..b3ed13b7 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,10 @@
2007-07-30 Brian Cameron <brian.cameron@sun.com>
+ * Release 2.16.7:
+ * NEWS: Updated.
+
+2007-07-30 Brian Cameron <brian.cameron@sun.com>
+
This fixes CVE-2007-3381 - a denial of service attack where
the user can crash the GDM daemon with a carefully crafted GDM
sockets command and cause GDM to stop managing future displays.
diff --git a/NEWS b/NEWS
index 4fc70e46..661e5f51 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,13 @@
Ahh news...
+2.16.7 Stuff:
+
+- Fix for CVE-2007-3381, a denial of service attack where the
+ user can crash the GDM daemon with a carefuly crafted
+ GDM sockets command and cause GDM to stop managing future
+ displays. GDM now is much better about safegarding against
+ NULL values returned from g_strsplit calls. (Brian Cameron)
+
2.16.6 Stuff:
- The GDM configuration option daemon/PidFile is now deprecated and
diff --git a/configure.ac b/configure.ac
index 6c701c91..18a20f36 100644
--- a/configure.ac
+++ b/configure.ac
@@ -2,7 +2,7 @@ AC_PREREQ(2.52)
AC_INIT(daemon/gdm.h)
AM_CONFIG_HEADER(config.h)
-AM_INIT_AUTOMAKE(gdm,2.16.6)
+AM_INIT_AUTOMAKE(gdm,2.16.7)
AC_CONFIG_MACRO_DIR([m4])
AM_MAINTAINER_MODE