-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 11 Nov 2022 13:37:52 +0100 Source: xorg-server Architecture: source Version: 2:1.20.11-1+deb11u3 Distribution: bullseye-security Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Changes: xorg-server (2:1.20.11-1+deb11u3) bullseye-security; urgency=medium . * xkb: proof GetCountedString against request length attacks (CVE-2022-3550) * xkb: fix some possible memleaks in XkbGetKbdByName (CVE-2022-3551) Checksums-Sha1: 991ace96a3a25e0f45ad8d8064406d732da81158 4236 xorg-server_1.20.11-1+deb11u3.dsc 470731401c0c828f603b6ac5b92799483bd12eff 9414572 xorg-server_1.20.11.orig.tar.gz f5661b01adde0d9222fc36823927617f49641896 166327 xorg-server_1.20.11-1+deb11u3.diff.gz 54d4ee7f89599e59dd0b18f4dfa254c9b14445fb 6981 xorg-server_1.20.11-1+deb11u3_source.buildinfo Checksums-Sha256: 3c430b829f6692fabb9287a1fb48781b19c4669fd8ff58652919828e7fdfb3ae 4236 xorg-server_1.20.11-1+deb11u3.dsc 4e9341c96f5ed0f6b9491ed732c501303479d3fe21da280c768a1822d7e5d352 9414572 xorg-server_1.20.11.orig.tar.gz 1b5c60adb7e1c77450907ecff623867ebdc4f63f13437ff023f082736ae22197 166327 xorg-server_1.20.11-1+deb11u3.diff.gz fad5f784190e4ef53c8fdd9d3513e5b7292f489c4959b48371cd4339dfe4c373 6981 xorg-server_1.20.11-1+deb11u3_source.buildinfo Files: dee4624217182fc20b3e4ca48f90555c 4236 x11 optional xorg-server_1.20.11-1+deb11u3.dsc 86ef76882fabf07028a95a29a3edf032 9414572 x11 optional xorg-server_1.20.11.orig.tar.gz 4e0113da0b5ec88251782e062099b5db 166327 x11 optional xorg-server_1.20.11-1+deb11u3.diff.gz f563992b20d5f92e9c92111eaad61f30 6981 x11 optional xorg-server_1.20.11-1+deb11u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmNu5VYACgkQnUbEiOQ2 gwIqyg//QJnn7cyA4DvVxm5L0KI9U9ieVwjtR7axAZYR7kvnEobkPePj+khGuU4g MygO5/dGY1Lh5V3pw5xUPKEimSxowBuxZn5wVhAef8X1NtWomDKPbBo1dxuf+ou8 Igx7DCt57w3HFhD7a9Q2QqCbGK83So72WBUQ1CjnqSa+MKh2JeIaWcifKwDxqmBu +UdvdRRFO5pi4GdVVnPW1M2+S0YYMLOA8Z9OiDUX4ekosmynC068BukW5foHfmwu Eb2Ht9zOGI2TG6ylPkbo7ZW6vEWcMaf83vWz0v5bxhyHoPNzIIW8IuquXZcPMsLC EiMbfLYK3hbYLJ2vFSiXXFajarbvZ7RRHsrG+0mq0AY1V/li0zIYy9Qz1WV5VTKJ 2KvLc0fHuXjdzBvT2lNBH9ZTeqDCm1NA6JcdzhyTwOPXX9hRC9PLujOfA41/xVKk Mue0qaNG2QAYs0GDtDFfoB9ZmUZeNYTbdAVqKN0GNDBz0QMbZEM+gkRGpR6/eZhH lQcnndL8IUq/TGJKlqYMDW2BU2FDSI8kz8inaE4gSahlGtmCCVHXYJ2OI7IZdtyC m8EahwiEMRVAv595AFtgdE4BkZhj5hDCvChmW8A01/eOrI0JbLJV/hC6vlZf3L0S lQ1f8E2bRSXaaMm2cKox1GrWu2ErcYfWG/T2GosEMdLA+EU1Eak= =lTGy -----END PGP SIGNATURE-----