-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 25 Oct 2023 09:35:47 +0200 Source: xorg-server Architecture: source Version: 2:21.1.7-3+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Julien Cristau <jcristau@debian.org> Changes: xorg-server (2:21.1.7-3+deb12u2) bookworm-security; urgency=high . * 0003-mi-fix-CloseScreen-initialization-order.patch, 0004-fb-properly-wrap-unwrap-CloseScreen.patch: drop, causes other bugs that are worse than CVE-2023-5574. . xorg-server (2:21.1.7-3+deb12u1) bookworm-security; urgency=medium . * present-Check-for-NULL-to-prevent-crash.patch: drop, applied upstream since 21.1.4 * Xi/randr: fix handling of PropModeAppend/Prepend (CVE-2023-5367) * mi: reset the PointerWindows reference on screen switch (CVE-2023-5380) * mi: fix CloseScreen initialization order * fb: properly wrap/unwrap CloseScreen (CVE-2023-5574) Checksums-Sha1: 98095f189c41cfe50547a1b2c1b33ab1996d0a01 4268 xorg-server_21.1.7-3+deb12u2.dsc d966b6c6da6ecef346b04062469a87aa0729685b 170506 xorg-server_21.1.7-3+deb12u2.diff.gz Checksums-Sha256: a4f03753eeb4c2381ecea6aea584d5e0bc1453d26c05e6dd6cd19af9323d8156 4268 xorg-server_21.1.7-3+deb12u2.dsc 7288e7a9aa1558830c3babbbf0acd51c87aca9848a9c5e5f65461d9ed0001829 170506 xorg-server_21.1.7-3+deb12u2.diff.gz Files: 9b32d7a7b4357c038298d403e6316d15 4268 x11 optional xorg-server_21.1.7-3+deb12u2.dsc f5cece7ee06d9c61d02e32934bf29972 170506 x11 optional xorg-server_21.1.7-3+deb12u2.diff.gz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEVXgdqzTmGgnvuIvhnbAjVVb4z60FAmU4xqMUHGpjcmlzdGF1 QGRlYmlhbi5vcmcACgkQnbAjVVb4z621/g//d9XOd/M4gegoWL3ajHVuodDQXnis u6jXdJXOK2C7D/KfN6njrhUZ5Z4YxU/rFMKdbtfM5ri8OKw5FUmKAjecLH/WlVNa lU7bOxvKtWr5d+jLGv0vEpf/HIFyn7+DM6wXmB2vKLriwBS/qNqFi+67BMC/rYMu VtyIO84drmRLrLIU/7hfkksT4uhx8/S67RLpcKZONRm8cDqdarVLSQ13ezkcthhl +u7UO/KrOa1GfVIc/AyqG1iD2wBzl+Yl1BODgu6aq5TlSdFZfXLKtLXpgS5cZNIz kb4dR3B5WIMfJwYsPYVPs6cC0gSIuF6hKkeHHn4bphDkKF/jm2HStcaSQvToQTYD IkDzyKczcz3BolkGPUE2nlkoPk9hq9Z6Nnph64c5yixNRRvKD+Qs7HivSXGFwbad +WNsukg/gagZE4wJCNaC/3wg2+2ANVcrInXSOUBYeePOTSKZwGAaSf/PoGO31yZt VEjhgKgeZ12UIqXE/0OPYMZfKEqv3cvaxYncf+YX+AhE0T6rsp99sX7ljEAEfhUD RKl09CDcMYlne8u71X1wjN7CpTTEloY5MBl2YdM5BmZEilUJr3W9vtHzT537mX+w kyiYUTShwsgGifP1CzIOg7W+ahZkCgPdgXzIao6GS/hxCCmV74Dv4bfto/7ChCZE Ae4b+Xli8pMsdsA= =Igp4 -----END PGP SIGNATURE-----