-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 23 Oct 2023 19:26:14 +0200 Source: xorg-server Architecture: source Version: 2:21.1.7-3+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Julien Cristau <jcristau@debian.org> Changes: xorg-server (2:21.1.7-3+deb12u1) bookworm-security; urgency=medium . * present-Check-for-NULL-to-prevent-crash.patch: drop, applied upstream since 21.1.4 * Xi/randr: fix handling of PropModeAppend/Prepend (CVE-2023-5367) * mi: reset the PointerWindows reference on screen switch (CVE-2023-5380) * mi: fix CloseScreen initialization order * fb: properly wrap/unwrap CloseScreen (CVE-2023-5574) Checksums-Sha1: 4cb06a3a3096d3cef6342dc7cb0e21adfab77ca6 4268 xorg-server_21.1.7-3+deb12u1.dsc 64a134919cf467cc404ce45871376cd6abb6cc8c 8922821 xorg-server_21.1.7.orig.tar.gz 2c653f19796de73f9cbaf466658803d47070ced8 195 xorg-server_21.1.7.orig.tar.gz.asc 0a91f6c00f42d75819517769099446c352526297 172506 xorg-server_21.1.7-3+deb12u1.diff.gz Checksums-Sha256: cd08a0cbcdd4c1c5c6e70232e41932fe592b9b1e67623f6847b2abaf7511d5c1 4268 xorg-server_21.1.7-3+deb12u1.dsc 1a9005f47c7ea83645a977581324439628a32c4426303e5a4b9c2d6615becfbf 8922821 xorg-server_21.1.7.orig.tar.gz 2f2113fe0866694084e952c7699a689d1fa0feefd1cc8492d79db432604246c4 195 xorg-server_21.1.7.orig.tar.gz.asc db58a08964dff7fb2e80d78e7944df89a2a5fbee58be439885c5b58322e2cf86 172506 xorg-server_21.1.7-3+deb12u1.diff.gz Files: f2c2e40a76ad391279d5dbd76d3ddaef 4268 x11 optional xorg-server_21.1.7-3+deb12u1.dsc 9c9b0375cb17ad8b4a79f9dd9efc58d0 8922821 x11 optional xorg-server_21.1.7.orig.tar.gz 3d6b4c2abedbcbd6cd7f071d74c56e5d 195 x11 optional xorg-server_21.1.7.orig.tar.gz.asc 663abefebaf9680213783f3d4e36d8ff 172506 x11 optional xorg-server_21.1.7-3+deb12u1.diff.gz -----BEGIN PGP SIGNATURE----- iQJIBAEBCgAyFiEEVXgdqzTmGgnvuIvhnbAjVVb4z60FAmU2rZoUHGpjcmlzdGF1 QGRlYmlhbi5vcmcACgkQnbAjVVb4z618yw//RggZz9fF5/h+3RP8bGqmRqHj7Tnm cHewulbzWJRA/2gqmsJjQZPi0qos6UOfzZOjz/XEFKP51/r8ziAhRL7A+j3aWg2H MFamh9tzQ20nhi3DwHIeKJEs02x9EuR7TJNPUuY9W0e86CL4P/iPUSi3nkfy3By9 2nKPUD7LbwRZXsIVRPjPFaAzdLqGMBMFJ2h3YqoUVrdpfz0b/cGkERhjHgY79ngx ce3EA1Dpi+M7IVvUgYrXwOmNu5CPj6marVPYaghIRbuyo4uXXer32ERjUsTeCjPv VDWruGB/JdgV1SyRgHDKDwC8RTlEb4P1xZdqiJ2wAXJE9d/cRrZpe6d5UT4KSjV8 F1/EH83/gobNyH18AcDg9iXANEuq2e513HhtbkS73zU/T2xRhWknUZKIlCfDdMGi BNVgv4T12Ej8GiH4QfgoFqMS0Cavb0B5+9Le8rTOekxGvG7ReKzRKZc8f6wqIcSL 9V4EyCJov9bixK1h8s1Rky955/XJnRv0Lxj8ER0wHwhnQ3UndAesvGBtS/YFiUWf r3mQrggFsp1kb37yCBCr+b20K5vM0STQP1JMzrWVu9iNVs8u7l32aT71jZulqZ44 yqz8TVu1C6qgB0g2jwBJI93SY6nbOmTqaMEeAHtr4pfG9DbiDC6LyZffHKFB+zvK rB8LyG/TT2U12s8= =WD8j -----END PGP SIGNATURE-----