-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 11 Nov 2022 13:35:13 +0100 Source: xorg-server Architecture: source Version: 2:21.1.4-3 Distribution: unstable Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: xorg-server (2:21.1.4-3) unstable; urgency=medium . * xkb: proof GetCountedString against request length attacks (CVE-2022-3550) * xkb: fix some possible memleaks in XkbGetKbdByName (CVE-2022-3551) Checksums-Sha1: e2cfc5566bf4a685efeaf6e1f5b3b75d6b3625e8 4207 xorg-server_21.1.4-3.dsc 3d2996974e6406cf268756c24b45ac0595746d31 8990504 xorg-server_21.1.4.orig.tar.gz eade393ea44cfbb726892c8043f693232e1de81e 488 xorg-server_21.1.4.orig.tar.gz.asc d22b93fed2f70c840c36fb2cb9d294d1cf3e90a2 163364 xorg-server_21.1.4-3.diff.gz 3924901a39ffdb6168d0d8ea0efb6b034ffd94e9 6945 xorg-server_21.1.4-3_source.buildinfo Checksums-Sha256: 64881a4640713ff6ed5a76d3702f4bd904b6d87e56994bb71f91b2857546699d 4207 xorg-server_21.1.4-3.dsc cbd5a1f75881e8a341823e51e489281aee0912c7023b4eed170b26b18f617e36 8990504 xorg-server_21.1.4.orig.tar.gz 811b5da6defa1ffc8e0d5191ceefb6357e4cad5a06617bad178c5c13775aa3ce 488 xorg-server_21.1.4.orig.tar.gz.asc 2e1908dba002bec764b29aadda2beb530299c733476655b8e995abf4a1023d4a 163364 xorg-server_21.1.4-3.diff.gz 9efa805d19d007586b73361553d7458f0317e2c48c19c647823896531938d850 6945 xorg-server_21.1.4-3_source.buildinfo Files: 3103ff5187353168ae676cd2e3d9a8f7 4207 x11 optional xorg-server_21.1.4-3.dsc 98e0abdf9e21120d2623948b25bdd7dd 8990504 x11 optional xorg-server_21.1.4.orig.tar.gz 4ea327aa0054409c3d3303084a441a38 488 x11 optional xorg-server_21.1.4.orig.tar.gz.asc c4439b1a711239df74e8d939673b7a90 163364 x11 optional xorg-server_21.1.4-3.diff.gz 295f7de523218ca8810d8ada1ac6af92 6945 x11 optional xorg-server_21.1.4-3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmNuQcgACgkQnUbEiOQ2 gwLs2RAAiEcOBNzxbC70cndnSOU+gvTd9OWmR7YRRz6Xgyz/c6zdY6JLwPRg6aLo UAl9qqFtv7J1gT9LFrCm3BO+TDrkrnieKwvKGUoK/ec48QKUjeaoCKslcvdnFe1H l7fLb+sL/yyJ0RbONflz1VZzwUuaUxPsA5wtnJOys06zkromZjSblKLtQqFinxeh wA6q7rl+ygX97Rkkg3A3m6LmB1fxUBb/1/Bt4af/btmnmh7cQdlG9YA18RL6SMcj EOCdmyEB9qjJ43x9ZDES6U4Pv1gF+57ov5B6T27RHFY3L4+BHolGVzOuCUzW8hAV p7RwS4a0FbQkWeAY3PJsm0s2PeQkTfRkDOPhKIL+5kptaGlBkdWpppeV2tb+1MZH sh6otlL7VbfS1/lvZg7CjHCd++xHhfpbLKG8pBNdphYzqBgP3WCXs5tQJ22+QlCE QoStQQuC5vq5UJlY5E2/DYccI4kJu4EDB39eKlj4UdNmB1eIvXWH31Adnz3UPBEH TcrXWfD4z94ED/b1VbRohLAh5nyVV1bfVmSj8brzP5YZ+kH5Z4RCY5UuMB3JYWIE Jab1zlr4UpDtx+iDSVT7ak8pEvaKCbttemcnFEpxOxew5MSxQ92qcw6npZzmdKMr TF4CT0AZfH/EabNbzWprbymN7Tgyj69l/TC8QDmbZhOLAxMNovI= =EfGu -----END PGP SIGNATURE-----