-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 26 Feb 2025 10:22:59 +0100 Source: xwayland Architecture: source Version: 2:24.1.6-1 Distribution: unstable Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Closes: 1098907 Changes: xwayland (2:24.1.6-1) unstable; urgency=medium . * New upstream release. Fixes: - CVE-2025-26594: use-after-free of the root cursor - CVE-2025-26595: buffer overflow in XkbVModMaskText - CVE-2025-26596: heap overflow in XkbWriteKeySyms - CVE-2025-26597: buffer overflow in XkbChangeTypesOfKey - CVE-2025-26598: out-of-bounds write in CreatePointerBarrierClient - CVE-2025-26599: use of uninitialized pointer in compRedirectWindow - CVE-2025-26600: use-after-free in PlayReleasedEvents - CVE-2025-26601: use-after-free in SyncInitTrigger (Closes: #1098907). Checksums-Sha1: b50ad66e2119298104e4caa0f368159871c61b57 2278 xwayland_24.1.6-1.dsc 8425074a39f44831dae96a9db41ad31f824c2eca 1302600 xwayland_24.1.6.orig.tar.xz b98edc196a9e053e6797e1b837c33cd06b606458 34952 xwayland_24.1.6-1.debian.tar.xz f9146c1c337734b7af0a7cee41e8ba703a000a85 9216 xwayland_24.1.6-1_source.buildinfo Checksums-Sha256: 25f96591e3c3fe674ab830ef0557141658fb14cf91f56defb33ac3420435e368 2278 xwayland_24.1.6-1.dsc 737e612ca36bbdf415a911644eb7592cf9389846847b47fa46dc705bd754d2d7 1302600 xwayland_24.1.6.orig.tar.xz fcfc0c634b7aaaa059c2e9337da2330c6b5c20b084009494d144c34bac9715ef 34952 xwayland_24.1.6-1.debian.tar.xz f2077a6cb89fbdd88cdc922eade5eccb9df07092b368fe1280ad0f3a7fdc0600 9216 xwayland_24.1.6-1_source.buildinfo Files: d2be53f92046e2123f816573e3325e80 2278 x11 optional xwayland_24.1.6-1.dsc 78067c218323fe2a496ca5f2145fe7ab 1302600 x11 optional xwayland_24.1.6.orig.tar.xz 4f98a58befad72ddbaba428972feca2b 34952 x11 optional xwayland_24.1.6-1.debian.tar.xz 08d02b2306ff001c9c68639c01dad006 9216 x11 optional xwayland_24.1.6-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAme+3YsACgkQnUbEiOQ2 gwIDUQ//cNllfT14VbDweytv1kJJ8Dy/wm3/ghJSU2fsontCrUqQu1vgeLwmcadd D/UbYetD6jJIInpXDTfoKq/vaMUKW9YHoCjoHPQKyZeGcjLeV3ng1U5MqKHPbajv fh/WBhCV/075z21lycuxpSL70tc7VzLZW/W2KSAWYbQYHg3ARAh+j2IDWrbnM2mm ko8mURYwSSJjMM6HGF8/xWL+ctq2+JHoaV9PVIYn7DaOev6Nt+hHvYtd92tA1fQT kh0fSoRXE4vlqWyK1sw8UIonHlcsuHbVyZzq16+dDXFBeI8pNHLlrddCT7ISrUso YTx/tzQFVjyUMY9ijaLnMY059eumkYW1PHJT6+/VhD5plEHKUThYWdXHgjLpCcAU oLyvrE6h1sHt5Dx6aUhhgO1B0tTywpE7gQqaNddTfOvrMf+lEVfhJkiSi2cVXWL/ OYUuw3iInY2TFGr1DPzgefX5E/dufcz8t5i+cMHQjoExDK64KaGCcjwEpsy1Ri2A Q6D9iuH/vhDf/FXP8ZcKOcGLZpQ1Ui4JMQkirOT0Fl4YRQULMw0xSMiz3Qj9BgSw WNJDHudP0gvxMYSWDkYjisQSxBXoSknmQntl1FbAKJZ9Tl9CRUm5JuJ+Ykre5gun jd3yXYNDjJO+/T7uIq5YAIsrTM6FJNvJlyQ+jeK9bdXo0ZZdpVM= =RbOs -----END PGP SIGNATURE-----
