* Release 2.19.5: * configure.ac: Updated to new release version * NEWS: Updated. 2007-07-30 Brian Cameron More work to fix CVE-2007-3381. * common/gdm-common.c: Now use g_strv_length to calculate the array size. * gui/gdmsetup.c: Use an assert to check that the array is not NULL before the loop rather than in the loop. 2007-07-30 Brian Cameron * daemon/slave.c: Rename login to login_user to avoid problem on FreeBSD with symbol conflict since their utmp code needs to call a function called login. Partially fixes #456697. 2007-07-30 Lukasz Zalewski * daemon/gdm.c, gui/gdmsetup.glade: Fixed some sting translation issues for bug #460407. 2007-07-30 Lo\357c Minier * configure.ac: * daemon/slave.c: (session_child_run): * daemon/verify-crypt.c: (gdm_verify_user): * daemon/verify-shadow.c: (gdm_verify_user): * gui/gdmuser.c: (gdm_check_shell): Autodetect the path to the nologin binary. Fixes bug #457958. 2007-07-30 Lukasz Zalewski * daemon/display.h, daemon/gdm.c: Fixes bug #457098. Range check in gdm_do_logout_action for custom commands was only allowing index 0. Now the whole range of commands is allowed. 2007-07-18 Brian Cameron * daemon/getvt.c, daemon/gdm-common.c, daemon/display.h: Fix compile issues for FreeBSD. Fixes bug #456697. Patch by Joe Marcus Clarke 2007-07-18 Brian Cameron * pixmaps/24x24/Makefile.am, gui/gdmlogin.c, gui/gdmcommon.[ch], gui/gdmchooser.c, gui/greeter/greeter.c: Fix some issues with icons not showing up properly in gdmgreeter menu. Fixes enhancement request #360984 so it really works. Patch by Michael Terry. Now use built-in icons. 2007-07-11 Brian Cameron This fixes CVE-2007-3381 - a denial of service attack where the user can crash the GDM daemon with a carefully crafted GDM sockets command and cause GDM to stop managing future displays. * daemon/gdm.c, daemon/server.c, common/gdm-common.[ch], common/gdm-common-config.c, gui/gdmlogin.c, gui/gdmcommon.[ch], gui/gdmflexiserver.c, gui/gdmsetup.c, gui/gdmconfig.c, gui/greeter/greeter_system.c, gui/greeter/greeter_item_ulist.c: Fix g_strsplit calls so that NULL return codes are better handled. * gui/Makefile.am, gui/greeter/Makefile.am, gui/gdmgreeter.[ch], Create new gdmgreeter.a library that is only linked by gdmlogin and gdmgreeter. This was needed because I wanted to make the gdm_common_is_action_available function a common function and the chkauthattr function requires linking additional libraries. This made this change easier and also makes GDM a bit cleaner. It is better, I think, to separate the code only used by the greeters since these two programs have more common shared code than the other GDM gui programs. 2007-07-09 Brian Cameron * gui/gdmlanguages.c: Fix memory handling of dialog_selected_language so it isn't freed when it shouldn't be. Fix for bug #108820. Patch by Takao Fujiwara . 2007-07-09 Brian Cameron