-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 17 Dec 2022 11:00:08 +0100 Source: xorg-server Binary: xdmx xdmx-dbgsym xdmx-tools xdmx-tools-dbgsym xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym xwayland xwayland-dbgsym Architecture: mipsel Version: 2:1.20.11-1+deb11u4 Distribution: bullseye-security Urgency: high Maintainer: mips64el Build Daemon (mipsel-osuosl-01) Changed-By: Salvatore Bonaccorso Description: xdmx - distributed multihead X server xdmx-tools - Distributed Multihead X tools xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server xwayland - Xwayland X server Closes: 1026071 Changes: xorg-server (2:1.20.11-1+deb11u4) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Xtest: disallow GenericEvents in XTestSwapFakeInput (CVE-2022-46340) (Closes: #1026071) * Xi: disallow passive grabs with a detail > 255 (CVE-2022-46341) (Closes: #1026071) * Xext: free the XvRTVideoNotify when turning off from the same client (CVE-2022-46342) (Closes: #1026071) * Xext: free the screen saver resource when replacing it (CVE-2022-46343) (Closes: #1026071) * Xi: return an error from XI property changes if verification failed * Xi: avoid integer truncation in length check of ProcXIChangeProperty (CVE-2022-46344) (Closes: #1026071) * xkb: reset the radio_groups pointer to NULL after freeing it (CVE-2022-4283) (Closes: #1026071) Checksums-Sha1: 53f27ff072e9be9cc824095235dbccaf36ef2538 3046448 xdmx-dbgsym_1.20.11-1+deb11u4_mipsel.deb ad7a2509bf1695e782781b35984e0ee1660c33fc 204060 xdmx-tools-dbgsym_1.20.11-1+deb11u4_mipsel.deb 70dd202ac66e8ba1db3787c694fd0e76d766247a 2312580 xdmx-tools_1.20.11-1+deb11u4_mipsel.deb 6125150fc0d72e7a964d04e8d47eb773b9781dd1 2939936 xdmx_1.20.11-1+deb11u4_mipsel.deb a753e240bee33dc66609c387da59e30deec78e92 2610700 xnest-dbgsym_1.20.11-1+deb11u4_mipsel.deb 154398fd49743f662c70c62cb7617fee232d4287 2833956 xnest_1.20.11-1+deb11u4_mipsel.deb ea219c5027fdbe8ee44856c790f4ada532ef375f 16605 xorg-server_1.20.11-1+deb11u4_mipsel-buildd.buildinfo b8350c2d31a5763a1b75ebd25d603308cc930a7c 3806796 xserver-xephyr-dbgsym_1.20.11-1+deb11u4_mipsel.deb 686816474ae4f461c3d4c72ad87b655aced77a6e 3074200 xserver-xephyr_1.20.11-1+deb11u4_mipsel.deb 63ec29b6f825f74a6b80a9bca304790bca24ff47 5531760 xserver-xorg-core-dbgsym_1.20.11-1+deb11u4_mipsel.deb b2fff3b5b01f8d0c678c4b24da6f386881f4b1e4 829296 xserver-xorg-core-udeb_1.20.11-1+deb11u4_mipsel.udeb cbbd412db9c6d5d5ac4458187271333493446b01 3440760 xserver-xorg-core_1.20.11-1+deb11u4_mipsel.deb 91bb18b0ad26b5c3ef29a2729187f5f93492af87 2457856 xserver-xorg-dev_1.20.11-1+deb11u4_mipsel.deb 80eeda4455ace09dda39b00a49713877cfcddf67 9252 xserver-xorg-legacy-dbgsym_1.20.11-1+deb11u4_mipsel.deb 25ca92b44da443a804b2b1a913fa58e7d37654e0 2289236 xserver-xorg-legacy_1.20.11-1+deb11u4_mipsel.deb 787644b5bd9d88dc707396dab46686848cb361f2 3172884 xvfb-dbgsym_1.20.11-1+deb11u4_mipsel.deb ee4acffeb6e9c76e54e354142a872c5bb483922d 2953912 xvfb_1.20.11-1+deb11u4_mipsel.deb c049a928ce4ae6d752e69bd3d5ea6d830807a375 3592488 xwayland-dbgsym_1.20.11-1+deb11u4_mipsel.deb 569d2f434acb229d3644b2abe10643ea2e586213 3031884 xwayland_1.20.11-1+deb11u4_mipsel.deb Checksums-Sha256: 1d92d3c31bbecbbb8bc4c05037c3c6a13fcf8fd912abe62ea97cf1c9606e02e8 3046448 xdmx-dbgsym_1.20.11-1+deb11u4_mipsel.deb fc3d53ab00bd0c8be9cb560d04bd586af3df4de7803b0975262d78b890290bab 204060 xdmx-tools-dbgsym_1.20.11-1+deb11u4_mipsel.deb b4940d6dd60f49c4ae97f9d80a1f2bb6b759ff1348985aa30acd6b460a844f64 2312580 xdmx-tools_1.20.11-1+deb11u4_mipsel.deb 4cbcfe42772db88b7922f0dce3dbaaa8100fcdc77c754340d0648e743d31fb19 2939936 xdmx_1.20.11-1+deb11u4_mipsel.deb 126da0a5550e4f0f7e18c99b25637c007b9b42f47792306c46ba6b8ce31f9a18 2610700 xnest-dbgsym_1.20.11-1+deb11u4_mipsel.deb a7d3405dc21dbd57a6dcf7cce0070eef84d65b2cbd6956054952b65b38ea5c83 2833956 xnest_1.20.11-1+deb11u4_mipsel.deb d1c2b204608b7ef382858048691036398e8c2302e41b5631156cdb8a2d105ec8 16605 xorg-server_1.20.11-1+deb11u4_mipsel-buildd.buildinfo 77bac7b23e6a524b3ebb9441a826255daac59ec8458210606d4d6431959b03e2 3806796 xserver-xephyr-dbgsym_1.20.11-1+deb11u4_mipsel.deb a8cb67ad0a9d23d2201b6a86fdb0ee988c8a3da254d95c1d0e4dcb2ddd47f6a8 3074200 xserver-xephyr_1.20.11-1+deb11u4_mipsel.deb 542d5a46ec085e096e0dc6b054fae961fb6c737eb25e867c110a3caf866ac183 5531760 xserver-xorg-core-dbgsym_1.20.11-1+deb11u4_mipsel.deb d69a633a594bd150230e7269b2761821ab5eb70fc2f1432b7c01cc8d0064ac44 829296 xserver-xorg-core-udeb_1.20.11-1+deb11u4_mipsel.udeb ce7ef0182e328706476f0d7e6ea41a9835254fe70268f942c94e8fc432afa7b1 3440760 xserver-xorg-core_1.20.11-1+deb11u4_mipsel.deb e2dc785845e829a593ecc78de9efbfb85e566b34139fb5d8dbf64964d060aea7 2457856 xserver-xorg-dev_1.20.11-1+deb11u4_mipsel.deb 8951df85ab718df84c9f2f54740d727800e2594c7a68e0b4d265332f92f62d8e 9252 xserver-xorg-legacy-dbgsym_1.20.11-1+deb11u4_mipsel.deb 9e0dc60e6de1918189a6a18e5bb002ebd510c6149f52278417caac356c13e976 2289236 xserver-xorg-legacy_1.20.11-1+deb11u4_mipsel.deb eac8725ef9b73bdb5d095bb5b5ac36fb4df7f0ce3a845a501d1388cd7616810d 3172884 xvfb-dbgsym_1.20.11-1+deb11u4_mipsel.deb 33110b95003bcbee0042cc279ab14dbcca639ab3099b1ce5fe14f2a91bb4fa03 2953912 xvfb_1.20.11-1+deb11u4_mipsel.deb 0c6f4b4f8ec6b333a4a6cd65e3188c63f7d3dfa78001d1006fed74687eef3708 3592488 xwayland-dbgsym_1.20.11-1+deb11u4_mipsel.deb 17eb852c7e6721ad89be08cc3bc2abbb09f8e75673f8174e9c1a97fce937dd72 3031884 xwayland_1.20.11-1+deb11u4_mipsel.deb Files: eb0df186a8d43ef82738ce8d65bcc79f 3046448 debug optional xdmx-dbgsym_1.20.11-1+deb11u4_mipsel.deb bdf63ae2c8322b3e73a183bcc50c0123 204060 debug optional xdmx-tools-dbgsym_1.20.11-1+deb11u4_mipsel.deb b1d478d298101194ce408e04469a196a 2312580 x11 optional xdmx-tools_1.20.11-1+deb11u4_mipsel.deb 186cc6cad8658520f3bb95bb2e6ebe0b 2939936 x11 optional xdmx_1.20.11-1+deb11u4_mipsel.deb 4c2bc81365c1892468047760ade9e52a 2610700 debug optional xnest-dbgsym_1.20.11-1+deb11u4_mipsel.deb 2a78490c62846b1f1b6c85a0f068d2b0 2833956 x11 optional xnest_1.20.11-1+deb11u4_mipsel.deb 6afabd63ca723d750b5659f5d3b5f3dd 16605 x11 optional xorg-server_1.20.11-1+deb11u4_mipsel-buildd.buildinfo fdbed31313ae5414ac55124fcaadff6c 3806796 debug optional xserver-xephyr-dbgsym_1.20.11-1+deb11u4_mipsel.deb b26df505f3c7c8ce6da8562c56c6cb0b 3074200 x11 optional xserver-xephyr_1.20.11-1+deb11u4_mipsel.deb 9ffaf3046a8d5eda4866801094c91f52 5531760 debug optional xserver-xorg-core-dbgsym_1.20.11-1+deb11u4_mipsel.deb 600909f59ea0fc11bb3de26fe2647600 829296 debian-installer optional xserver-xorg-core-udeb_1.20.11-1+deb11u4_mipsel.udeb f2ba4c896b44905577e363ed083c9f2c 3440760 x11 optional xserver-xorg-core_1.20.11-1+deb11u4_mipsel.deb 54390ff98c84a259114c0f1524d6b240 2457856 x11 optional xserver-xorg-dev_1.20.11-1+deb11u4_mipsel.deb 30e2ce264fecfa0995639ba7f40087b3 9252 debug optional xserver-xorg-legacy-dbgsym_1.20.11-1+deb11u4_mipsel.deb 53383b63f74dde44af79e6740f2847ea 2289236 x11 optional xserver-xorg-legacy_1.20.11-1+deb11u4_mipsel.deb 43e93216215c344b9095385d817d766c 3172884 debug optional xvfb-dbgsym_1.20.11-1+deb11u4_mipsel.deb ec4e7f0a020ce456a17367694d59e66c 2953912 x11 optional xvfb_1.20.11-1+deb11u4_mipsel.deb 283355aedf81fd4d99393aebd63b5dc7 3592488 debug optional xwayland-dbgsym_1.20.11-1+deb11u4_mipsel.deb 3691d0280aedef6feec8f8c0fd052035 3031884 x11 optional xwayland_1.20.11-1+deb11u4_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7gvl9o8phoQDAS3o7Lbsjpk9n6sFAmOdqZwACgkQ7Lbsjpk9 n6swxxAAiQKlIJI8akZuelrMHrg8mdZNjGImPQL8uuxArcq+E00k5z47ARdx8Kqj 8BysnExhsPpENSVwpeHnEYfYNZZD3COfo/LzM8KQEhHTjrlwbOX878artnHqwp+4 gEGwVTlnjMZ4N8W4p/7Ex1bcMW58svVaEhbRANHKCQ+0LOYj8T3QfgyjlU9b8Jaz MhRH4EVoljK+6ApOidnKyCFismZ2v0Or82HrTcGpxRCLy7rB4A/ugWVB5jaXbWLk FEec75jrq1X2KMAwLOa2pZ0qZU7BfokWL5py/Krsn9twrGYl6Kd22+Z1hutqxJUd 2Z64TFyKC9OoA9BeAwxMDyGn9arG2tb3hBn0xK5ELoQQ+zblDeMkNfvBEZlc+00V nJONLKVl/5bphBBXp4jc2ofgmgBtiOA9MljyT7UMJcjcQDgGcDrLzjocbW/ObGfk 0rCcJoGzdMwvEful2j2Fx14oF9sQhR9YsCOzvgOJi5Y1jmLBa0vztvj5X+iA0Qyj l8x/js0q1jl1sGSAbdCQBGUtNXfKFAkxQaZgD/FXTUDUwoGUNfqMaqTG0P8WGnVK ZcBeDBM8QkgiVBfBScGSs1x3btQ3K3Q1SMExFm8U6layU7gUw985lL/endgWDd7P xQS6C2I4/kUpXpgsX3FIuZWVc9yfAe/+gC9f/EGYFOf5oPVhncU= =jg1q -----END PGP SIGNATURE-----