-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Apr 2024 14:30:14 +0300 Source: xorg-server Architecture: source Version: 2:1.20.4-1+deb10u14 Distribution: buster-security Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Changes: xorg-server (2:1.20.4-1+deb10u14) buster-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2024-31080: Heap buffer overread in ProcXIGetSelectedEvents() * CVE-2024-31081: Heap buffer overread in ProcXIPassiveGrabDevice() * CVE-2024-31083: Use-after-free in ProcRenderAddGlyphs() Checksums-Sha1: 4bf732494b697e293b78baae4efcc54ef58e9f32 4186 xorg-server_1.20.4-1+deb10u14.dsc 94dd9612c5e4233ed3cb23063ab10f43b4ae4bb2 8553791 xorg-server_1.20.4.orig.tar.gz 257a01543988f509f284e505fce02fcb49739dd8 177175 xorg-server_1.20.4-1+deb10u14.diff.gz Checksums-Sha256: be70dce223c531fa10cf39e3184a4ca5e12e0d891b9847824a1cb054e183b2bc 4186 xorg-server_1.20.4-1+deb10u14.dsc a6447de89eca3e22eeead682b325d902779569534ad83388c9e16611d72baaf3 8553791 xorg-server_1.20.4.orig.tar.gz 157485f84a4f06a33d85c106a0cbc4ffdea9299732ba86bafadc0b5009e4778b 177175 xorg-server_1.20.4-1+deb10u14.diff.gz Files: 0ffbecf3f1e5d94702180334859b2f3d 4186 x11 optional xorg-server_1.20.4-1+deb10u14.dsc 4151b46d6036f4997d27c2d2b7be38e7 8553791 x11 optional xorg-server_1.20.4.orig.tar.gz f4cbbb393224006320ebcecf52ace7cf 177175 x11 optional xorg-server_1.20.4-1+deb10u14.diff.gz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmYdFoAACgkQiNJCh6LY mLE0hQ/+O7KfTC1Wrm/HyUUWm6SopE5SUic/wqNx6BGQW8ol9WxlrdNoPopMgj+6 1L5RIA9Bulz4u4VxJNCFvEKq7MnJWVvsSdTg7zEW/fQjq7f7H8E+9/EAyYVwhvNS J+BscCNtdL/tpn53XL2hjfUUc8Ufxnl/USMCRMIA9WLfHBfo8y9khUwLldp0rEdS muf6LayBHBsFmV9R1chgUdt5YIMbj+AZj5wMj5YMHuHcxjaCbTh5Shic5up9sUJD jTIO7eHBhFb0Cw/UmabGj5tXdEGNJebwCkqBlm2wr7SWtW1H/S/1pxzSYVhg5RLJ PFc9lmV4jDpdUAG7syZ2qnprMNMIYJMLeWTpJz2ZDeX0LOV2wJTMO5lpKBiK0wgG QRkhhyKiq0YJf0MP8aLwlljMIZX3Q/mQyoFy6XLdElj73B6rWmxPfGfP0PJ8MFiR LTmjL7xW7zF2SX55MdjWcIIdswxxV9KedRzXacR+znKSOsRN2yv8g45FI4uqXvUk nElalTj1KHMK4DpWyGEYlbzbOnxL2Gx60q/niUyUnLknVMxejNnVJju55i1Jtk9+ As5V87M2A3Rt1luVBKnAx67zAesx4oJytEutEIeew9Op9wzIFzIhUXW372EGr++7 Iz/RT+BRAbJ877TvGOwzDAF0xcew8dvY+hqoAd0o00aJYt84Gns= =TCmu -----END PGP SIGNATURE-----