2006-07-30  Brian Cameron  <brian.cameron@sun.com>

	* Release 2.14.13: 
	* NEWS: Updated.

2007-07-30  Brian Cameron  <brian.cameron@sun.com>

	This fixes CVE-2007-3381 - a denial of service attack where
	the user can crash the GDM daemon with a carefully crafted GDM
	sockets command and cause GDM to stop managing future displays.

	* daemon/gdm.c, daemon/gdmconfig.c, gui/gdmconfig.c,
	  gui/gdmflexiserver.c, gui/gdmconfig.c: Fix g_strsplit calls
	  so that NULL return codes are better handled.