-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 15 Dec 2023 06:00:53 +0100 Source: xorg-server Architecture: source Version: 2:21.1.7-3+deb12u4 Distribution: bookworm-security Urgency: high Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: xorg-server (2:21.1.7-3+deb12u4) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Sync "Xi: allocate enough XkbActions for our buttons" (CVE-2023-6377) The original upstream patch applied for CVE-2023-6377 was incomplete and still allows OOM access. This update syncs the patch with the upstream applied patch. Checksums-Sha1: fd35b1276616799dfb00a8364d25be43016e8c7b 4394 xorg-server_21.1.7-3+deb12u4.dsc 5d3ffced51f5beb0162297a344b2ae1834881906 172322 xorg-server_21.1.7-3+deb12u4.diff.gz Checksums-Sha256: 32b9f1109dd437af718306bc941a9a5af258b75f932c39ddd6e91649a035ec77 4394 xorg-server_21.1.7-3+deb12u4.dsc 399f2b92b21368264928e12d77352ae36bac998462fd4eaf46214816537f1b9d 172322 xorg-server_21.1.7-3+deb12u4.diff.gz Files: 59616806ec9cef6021be40117b87d8f5 4394 x11 optional xorg-server_21.1.7-3+deb12u4.dsc 6e7bab6fd038eb73098eee8482aebb59 172322 x11 optional xorg-server_21.1.7-3+deb12u4.diff.gz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmV732NfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EO5YP/jv6Qk628ZS5tnieTJiEPoEri8eOhgOC 1DoTziXSD9q9A0H+QEPsoHjI5D68L5/BheyI5DduZmoMWHcmyOfYTyuO2XNxeiwe MGp4tEmp++kNOsI5K7dzqwrsOsQtGh30oJZrCZY6ltYYDAxQKfmFnF6kOXsp10a4 uYoaR3ccHUBTpHw+MxnsMMzBiiahCwZ33AJBDVotr75cUYe2jsWQP6t7UQL0pUry nScT4lzfQ3G9U4AQP7hHyMoiBOMlq9XnD0oMdat3OOuqx9Er6CPb4u205scfsn2N 2iL3C7UJNVszwIEMWMVGWp7JAW89AaemF/a8SQAH6T+Xhk70GCIasRgEdtlzdht5 voxkzw62+sNRH+XMSNuZq6bZPQTwOvDzxGo2MLPrUJUlernxmKq7uNRmZ0DqCSxF 2Mqu9VS4tRbfNFyfdcapcOxuybUYqchezdudLLYwVBi0V1A0yEUz0+9NXon7j1Ou BatIesmDOnm8g25Vj/51q+gOz2A9wT1V2O1IbfkGMWALJAskfpf3Dp7XaqHIfoQd 64nR+4K6iOezc6cXMW+8BdbCFZTEGJ5QMPBj8dNxbAez9eL2iqSjEkG73Z8WGDOU 7GKF9yWegU2izi4Awxpzo3wDQKxZQzgWx+q4YRZSg5pi+ZT0nRy0GA5Um2hQkXcF 69993wfKltCx =i67i -----END PGP SIGNATURE-----