-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 11 Dec 2023 19:03:02 +0100 Source: xorg-server Architecture: source Version: 2:1.20.4-1+deb10u11 Distribution: buster-security Urgency: high Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: xorg-server (2:1.20.4-1+deb10u11) buster-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2023-6377 Xi: allocate enough XkbActions for our buttons * CVE-2023-6478 xorg-server: Out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty Checksums-Sha1: 7d018030bb850784da0147a9740a5e7ea66dfc04 4345 xorg-server_1.20.4-1+deb10u11.dsc 94dd9612c5e4233ed3cb23063ab10f43b4ae4bb2 8553791 xorg-server_1.20.4.orig.tar.gz 27b1b8448627bda272b38c893c45ad06fc629b98 165036 xorg-server_1.20.4-1+deb10u11.diff.gz d66a7dc4016d4bd243520cce529d428aaad51083 17779 xorg-server_1.20.4-1+deb10u11_amd64.buildinfo Checksums-Sha256: 3008753b894cf309a9de5c1eae7601447c4067bc54068c085a4421c2c2d49a50 4345 xorg-server_1.20.4-1+deb10u11.dsc a6447de89eca3e22eeead682b325d902779569534ad83388c9e16611d72baaf3 8553791 xorg-server_1.20.4.orig.tar.gz 38be752e5dd42d08936a407fff8e7cab2958d0f3278d9845c578f7e216902a3f 165036 xorg-server_1.20.4-1+deb10u11.diff.gz 85e514b4296c35b438476359d5f2502b8c6991e7c403fd6947f48d0a36709728 17779 xorg-server_1.20.4-1+deb10u11_amd64.buildinfo Files: 14a0f8337a506b23eb1209e0182f88cd 4345 x11 optional xorg-server_1.20.4-1+deb10u11.dsc 4151b46d6036f4997d27c2d2b7be38e7 8553791 x11 optional xorg-server_1.20.4.orig.tar.gz 7c538809c40daf2a402b654478cd5b90 165036 x11 optional xorg-server_1.20.4-1+deb10u11.diff.gz 63cded6f5685528720de3f97aad5d845 17779 x11 optional xorg-server_1.20.4-1+deb10u11_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmV5XOVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR1QjD/sEqDpUfyZ3puQ6kamKHkjMhlFZYei6 T56Cf9hc2+T4i0QO54x/dX/oQEFCikE97FJTdC0LTDISkd0W5S9PKNyO1zJgAJPL ZhGTGuo0Bhdn2N1IbVc20FsHwgLxW0LuWfJuUPvJI/8Ja7SZHhSRmkYxunr4Uuiy ayZtY74G65nzJ8Yf4ZSRF8TzLh6GBf7HnlDVn0UYCpPowVv3JrUFGxusVr0N/ic3 iIQ185UthzD38d6B2iEbbqWo3W7lls4EPr30O/AOQwnGfW4n4rd/1/itssLvWaLX w3Au0n5chGpuWQsLvtmqAZXI3drul5JTN1Gm7txsSDuSa82BgkQAXIy2gLc3bb/L QBMIwUSb02dwBoP4z0pFRtVDEkp2hHaQHVMcAgK99bvba/OPXaWJvLGh1rN5z0jA vGcG91GVbh1Ce2DMPdsRMOyh7Z5PqWfOsn45dZ+iH62/iFtf4YMSnQK/HsrzTM2Z 4B/QZdzL5oQh+wlEQnLX641LKSzyqEQVVB7R485Lsiy9fhWmKW0O9eC0ZDI34bB0 2qw1bciBFQ0jAVQg9hCGz5ujyi60qyUa4MqFRVe0UDKdCYbK/KweMs3GZvBULz2X vPFN8hjJGi/X3pcQTeIo4NnvMEC2WHFcuUL7gZbcvL6XFW/TAPNPgmX0rc+/CvwG vXF4BFyuBfQz9w== =0C10 -----END PGP SIGNATURE-----