-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 17 Dec 2022 11:00:08 +0100 Source: xorg-server Binary: xdmx xdmx-dbgsym xdmx-tools xdmx-tools-dbgsym xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym xwayland xwayland-dbgsym Architecture: ppc64el Version: 2:1.20.11-1+deb11u4 Distribution: bullseye-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Salvatore Bonaccorso Description: xdmx - distributed multihead X server xdmx-tools - Distributed Multihead X tools xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server xwayland - Xwayland X server Closes: 1026071 Changes: xorg-server (2:1.20.11-1+deb11u4) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Xtest: disallow GenericEvents in XTestSwapFakeInput (CVE-2022-46340) (Closes: #1026071) * Xi: disallow passive grabs with a detail > 255 (CVE-2022-46341) (Closes: #1026071) * Xext: free the XvRTVideoNotify when turning off from the same client (CVE-2022-46342) (Closes: #1026071) * Xext: free the screen saver resource when replacing it (CVE-2022-46343) (Closes: #1026071) * Xi: return an error from XI property changes if verification failed * Xi: avoid integer truncation in length check of ProcXIChangeProperty (CVE-2022-46344) (Closes: #1026071) * xkb: reset the radio_groups pointer to NULL after freeing it (CVE-2022-4283) (Closes: #1026071) Checksums-Sha1: 965d7b902434b664244a4c38524d14e066be7011 3153916 xdmx-dbgsym_1.20.11-1+deb11u4_ppc64el.deb d8dbd2598fb92088dea402821890a36e4a46f6e7 203896 xdmx-tools-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 53e0980015121a2337ad8abf196abb529887c973 2317072 xdmx-tools_1.20.11-1+deb11u4_ppc64el.deb 9c9f2a1e5963dd6f7bea5f10b3717f37a50db526 3103412 xdmx_1.20.11-1+deb11u4_ppc64el.deb 8b7363f8ddd197eecf17bd5d8d6b031a190cf511 2692412 xnest-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 82d9893e2c61704589a4f0ea88cb788f676b4179 2979852 xnest_1.20.11-1+deb11u4_ppc64el.deb 1e87e20abb17d73b1529c51b798697edf4b57fe0 16839 xorg-server_1.20.11-1+deb11u4_ppc64el-buildd.buildinfo 7326becaf3e9732f75d24c609c93450623709e6f 3930200 xserver-xephyr-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 76c9cfcbc7b85a940965268a76e95595185a9b1c 3276512 xserver-xephyr_1.20.11-1+deb11u4_ppc64el.deb 32e9d0bc29584e1c98f9d5194ed1cd743983a657 5676552 xserver-xorg-core-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 0023b8b7f802801dfd61b27f8732d3c772571674 1033336 xserver-xorg-core-udeb_1.20.11-1+deb11u4_ppc64el.udeb da6a035339af9f1eb283508f717b0554874e784c 3724200 xserver-xorg-core_1.20.11-1+deb11u4_ppc64el.deb 968b85ac6a6f7c9d0738091a2c01ed446fa3e329 2457868 xserver-xorg-dev_1.20.11-1+deb11u4_ppc64el.deb 0e56806a83948e20f8aba770859556d152642f98 9908 xserver-xorg-legacy-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 8a9d20ef6a257443bc04f13d70aec870f3273733 2290032 xserver-xorg-legacy_1.20.11-1+deb11u4_ppc64el.deb 86ebf967be3630027ba0facceb0bc1c15f50dd4a 3267824 xvfb-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 3cf3806298183477600edce4e1f5f8ca66da23aa 3129276 xvfb_1.20.11-1+deb11u4_ppc64el.deb 9839c159cbe0a08111a1d78065f707135c283be4 3710860 xwayland-dbgsym_1.20.11-1+deb11u4_ppc64el.deb b3131da6ab0159722ac9747842072cc207ec8c4f 3223852 xwayland_1.20.11-1+deb11u4_ppc64el.deb Checksums-Sha256: 0e39c9d465645cc9115ff0a66d52d537ae7fba8aeeafc38e8fec4cd185f1d9d9 3153916 xdmx-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 546d2569b4857648a05d37c2844dc25b3d91c10138936a2ca34df8620f8ae73d 203896 xdmx-tools-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 998ac8e96635be0c1fda59066b99b4b87e221ca06c0a68bac889fb5617beefcd 2317072 xdmx-tools_1.20.11-1+deb11u4_ppc64el.deb ff5c9c98cae36fea8171ceaecb76fb1e8fc0ed40c03c917defb3ee6f1fd7d990 3103412 xdmx_1.20.11-1+deb11u4_ppc64el.deb 2afbb52389cdcdce0b84d842fca8fc5d8e2b38f27ae044c3d6caee7dbdd3cd51 2692412 xnest-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 1304b37967468106d44030e0b57973575e30337fca1bca4e08a1321651ba287e 2979852 xnest_1.20.11-1+deb11u4_ppc64el.deb 9a26c16cc59696e34fd9255bf2b96e5219abc24d96c702ff54594d54a7adb29c 16839 xorg-server_1.20.11-1+deb11u4_ppc64el-buildd.buildinfo 5249124f72948fdcb988d003e186e58219cec1a633d55577b5beb2ece331d8e5 3930200 xserver-xephyr-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 4a4b65733e26b7dcb092f2445cd58992822a3bee2daf81362574dcf83d2f3e98 3276512 xserver-xephyr_1.20.11-1+deb11u4_ppc64el.deb c9b487dbae4f0a3a9e01e5e2d6fa27072ca54659a916814fd8ac599258d0cd3b 5676552 xserver-xorg-core-dbgsym_1.20.11-1+deb11u4_ppc64el.deb c4c03dccf0978d1229066471edef962ea19048917e0af6f60b797178819203bc 1033336 xserver-xorg-core-udeb_1.20.11-1+deb11u4_ppc64el.udeb b3681be383dc84951ddeb0eb86077dd0dc7c6e65b72dd29213ef5e39d9a1a053 3724200 xserver-xorg-core_1.20.11-1+deb11u4_ppc64el.deb 9aaaace8ed6d8eb70a8ca3157a6b42bfc2eeb3bda54bb394b96e6216ca8d0186 2457868 xserver-xorg-dev_1.20.11-1+deb11u4_ppc64el.deb 2647fe989da2be09614e83bc6b416e5751743a869c2feecf91e2887d2722f70b 9908 xserver-xorg-legacy-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 9ec621941aa2c557c7a3e0efe2ddd8a6f5bd139a6d32ac6d60d3ba501e5f90f1 2290032 xserver-xorg-legacy_1.20.11-1+deb11u4_ppc64el.deb 85a922b21716f362be90f402be33f51c77eb2dcd234493d07064570a80f9a7c7 3267824 xvfb-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 6ccb5faf30a585480bf754dd13f6dbd12fbf6ab8f6f18495a0de8fb07be79fb2 3129276 xvfb_1.20.11-1+deb11u4_ppc64el.deb 91bb1b39cd80b6df8e83e41a24ce6ff3ef45fcd777422644565da24c92621ba2 3710860 xwayland-dbgsym_1.20.11-1+deb11u4_ppc64el.deb d8460c73e13d9aa61e8f8afcfffd5909154fa2d92968c67172c6d615d780c595 3223852 xwayland_1.20.11-1+deb11u4_ppc64el.deb Files: 727c654ba44e9141f59cbe0b1034ec50 3153916 debug optional xdmx-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 61e0be3790f696adf8a37b5e0b6bdd91 203896 debug optional xdmx-tools-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 449a88959c15c10efc30dadd53c40d34 2317072 x11 optional xdmx-tools_1.20.11-1+deb11u4_ppc64el.deb f881bb8c200b857702324b8f8b45ac09 3103412 x11 optional xdmx_1.20.11-1+deb11u4_ppc64el.deb 2a2e2381df5e341af989d689f7f74c63 2692412 debug optional xnest-dbgsym_1.20.11-1+deb11u4_ppc64el.deb d294d0730c0e51a4139d67372067b0cb 2979852 x11 optional xnest_1.20.11-1+deb11u4_ppc64el.deb 3698775a388e2a878a088a88ac0d51b9 16839 x11 optional xorg-server_1.20.11-1+deb11u4_ppc64el-buildd.buildinfo 0350f9f38875ef92d6d7f1cf8eb8d868 3930200 debug optional xserver-xephyr-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 7ef7119185ca6e80cfaeae9f5afb5f24 3276512 x11 optional xserver-xephyr_1.20.11-1+deb11u4_ppc64el.deb 0c0952b9d4ac5dab940d1916ccf701af 5676552 debug optional xserver-xorg-core-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 542d4df38661358da43e033ea4f6edea 1033336 debian-installer optional xserver-xorg-core-udeb_1.20.11-1+deb11u4_ppc64el.udeb 3a7a5f3315567a731776118b86b174e2 3724200 x11 optional xserver-xorg-core_1.20.11-1+deb11u4_ppc64el.deb 3b148b21d7c3a4e368204ba9991db21e 2457868 x11 optional xserver-xorg-dev_1.20.11-1+deb11u4_ppc64el.deb 841bb8e3f7bee39e71cfc23137b6f01b 9908 debug optional xserver-xorg-legacy-dbgsym_1.20.11-1+deb11u4_ppc64el.deb 47356243772b0de07d41e45df77bc79a 2290032 x11 optional xserver-xorg-legacy_1.20.11-1+deb11u4_ppc64el.deb 2e1da2ed5ac339eebebcc4c0021d5abb 3267824 debug optional xvfb-dbgsym_1.20.11-1+deb11u4_ppc64el.deb eb6cbde8d4b1f3264e61b1e5da78031c 3129276 x11 optional xvfb_1.20.11-1+deb11u4_ppc64el.deb 4559be87ba61188cc8a5862f85ee0b2f 3710860 debug optional xwayland-dbgsym_1.20.11-1+deb11u4_ppc64el.deb beae28b8323a546173de596bd438b49c 3223852 x11 optional xwayland_1.20.11-1+deb11u4_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEG6HwUrz8cgTg6xaPZnETzaamDSwFAmOdoyIACgkQZnETzaam DSxX+xAAkndd2IH1Y+YPutCR/dhJ7+xhutYMWcdYw0X4eo0xkX6jJ4b9q1I1n2zg iCjLVfSWKfF+Y2XR1vx4UfZcEYZEzhzDwPBkUEd9Dw56lJM8jpR5oD7/23GrvX5L 07qWtPpQfYizzodzUgc4e48ygb9hEZCdeZ3zjH79ToFv/+4TZkNpCH8uxVzzxvlE s3xP1MHrXP3AIb6mgjHu4M/voq//XW4f6ZI2xXI2Tmcj0F39ONSvrpUs4rAx7vJc Tkn6MXf+Xd/oVGUb8tn+UFx6rm2CTB8iD41+AxbU+F5Px98bKNGDrWPOidhY9W05 zdrwoIDt7TLglseLkBF95XjfrYn1AdJEo1/dZDhOuQWTq9q0GuYsH44HA1zLAjG9 LazpZmnLvfCm5RzaQQsfsPm4O2iXyM+ySBIURpgMGr0Vis++VLi+aBQBTj9SiGG3 91lkZkcqJqtFE+24tFxoCnPU2ACSbSByhHc+dvQacj8QJ+YHreeBSueTTDYJSCOQ 8KwdY0kK6Ia/HPcuZUVULTjB1HIbxwjdvPRvhUlk8zICfvSdncQ5UKPIBvEvc/1D y2X6IJjW8S/LAtsRnx/OvO6dGyWPiulvrLwcn6bi3GIKH/jVm+uZ0Q1gyPJwW9+E arKn73C2c4E3PVnFaNPI3qPokB0N0Z11ijpxdsLUGD2TAv9swr0= =iwLj -----END PGP SIGNATURE-----