-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 11:59:35 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: arm64 Version: 2:21.1.7-3+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Julien Cristau Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.7-3+deb12u6) bookworm-security; urgency=high . * CVE-2024-31080: Heap buffer overread/data leakage in ProcXIGetSelectedEvents * CVE-2024-31081: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice * CVE-2024-31082: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap * CVE-2024-31083: User-after-free in ProcRenderAddGlyphs Checksums-Sha1: 9db2938628061862161fefd593043ec95c7f3b48 2638432 xnest-dbgsym_21.1.7-3+deb12u6_arm64.deb 8686a640f2b76367e825d8c383b94fe049754f5b 2961936 xnest_21.1.7-3+deb12u6_arm64.deb acd2d5ef50a048b4fc1f23e4240acbc08e9d3193 14759 xorg-server_21.1.7-3+deb12u6_arm64-buildd.buildinfo 0af8215854cb462dbf3b88f416ebc8d887c83fe3 3875776 xserver-xephyr-dbgsym_21.1.7-3+deb12u6_arm64.deb e6b5a482fc4da67fa023ca2d16c3c18705f5e77b 3205968 xserver-xephyr_21.1.7-3+deb12u6_arm64.deb b9fbd747ed486d36da853e6ecc7d99bac39847b5 5707136 xserver-xorg-core-dbgsym_21.1.7-3+deb12u6_arm64.deb da93d5e45cbd2f31f38d2fdd266d36b83e4d160a 884584 xserver-xorg-core-udeb_21.1.7-3+deb12u6_arm64.udeb f977ea1cb59ed44948ab4aeb255bc5c53dc3cf60 3591564 xserver-xorg-core_21.1.7-3+deb12u6_arm64.deb a20c587cd5903882410a86a285d5fe4c09cb5c7b 2554088 xserver-xorg-dev_21.1.7-3+deb12u6_arm64.deb e51a191de3b121c0ab5652947ea636efe40f0776 9472 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u6_arm64.deb 65cb23788408f55e22e2937c78b7ff91c92803c7 2388048 xserver-xorg-legacy_21.1.7-3+deb12u6_arm64.deb a549a41b9377d0492d2422b039b78cb288b530e7 3200296 xvfb-dbgsym_21.1.7-3+deb12u6_arm64.deb a6921ff2a316730b1f558008ebeb8297235c8736 3082776 xvfb_21.1.7-3+deb12u6_arm64.deb Checksums-Sha256: ee21800ab024f29788c3eb94086aa1206e7d216cb7ba0c0e975ba0b0497a763b 2638432 xnest-dbgsym_21.1.7-3+deb12u6_arm64.deb ee3b29eb9e9777c13ed9f10a8ee7b68fd0251f9bd8c87aebd7421df810fc53b4 2961936 xnest_21.1.7-3+deb12u6_arm64.deb 9a9709ff77f53e4bce613c7f3feeca624381c6ccdeed34152c004beb53d5a866 14759 xorg-server_21.1.7-3+deb12u6_arm64-buildd.buildinfo 0b2f8654bd8734b301ad62e796b7282a857f4865fa48ae5450a1468d5a01f57f 3875776 xserver-xephyr-dbgsym_21.1.7-3+deb12u6_arm64.deb a2e147aac97970eebead6c56b507fead8c23a50b1058a66c4583c4115190d3c6 3205968 xserver-xephyr_21.1.7-3+deb12u6_arm64.deb 9641e2e1bd07a117bc1f4a2a526ed1a52a6da3d3920ec6bdc4ede91611bf2171 5707136 xserver-xorg-core-dbgsym_21.1.7-3+deb12u6_arm64.deb 8f26a24e8e950faa6d93414b17d3f1098c7e2e6cd150e544ffb86e817afb16d2 884584 xserver-xorg-core-udeb_21.1.7-3+deb12u6_arm64.udeb 1c92c0955b12bcc7cd69a774233a3b19f77d92ee5d9cbb182ee56d78a99a0614 3591564 xserver-xorg-core_21.1.7-3+deb12u6_arm64.deb 225773f88a79320a472abbdf8a0a1f8f53b4ec0a280e5d0a594236b62195021f 2554088 xserver-xorg-dev_21.1.7-3+deb12u6_arm64.deb cf61fb729531c78e0bbf0d091be92089e7c1624217036a324ac4d6885b572e1a 9472 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u6_arm64.deb a96d0339e7fe17ba17bbed2b0d16a5179edfa859b3c7b1db1d36b04f1cbb937d 2388048 xserver-xorg-legacy_21.1.7-3+deb12u6_arm64.deb 539b0186d2dd6c54e03b7cd976f1d769b8fb1f8a6ff2e10f3bb974bee0cd6bae 3200296 xvfb-dbgsym_21.1.7-3+deb12u6_arm64.deb 37dae39574fca4a9908738335553a8d534d6444a0e8f7cb65971922fdb7b504f 3082776 xvfb_21.1.7-3+deb12u6_arm64.deb Files: 650c5aa441881ea824703c4d330918cf 2638432 debug optional xnest-dbgsym_21.1.7-3+deb12u6_arm64.deb 5fa2c0089ed2a69c8c15acd852d301fc 2961936 x11 optional xnest_21.1.7-3+deb12u6_arm64.deb ed4bec072ca06d01be571db77a9a6f53 14759 x11 optional xorg-server_21.1.7-3+deb12u6_arm64-buildd.buildinfo 6208d4a329309a021fd88ec7beb3b504 3875776 debug optional xserver-xephyr-dbgsym_21.1.7-3+deb12u6_arm64.deb 90677f9e1adc47779db05b7e1a533f39 3205968 x11 optional xserver-xephyr_21.1.7-3+deb12u6_arm64.deb 912dca39042e957c9c53dc856f78ff91 5707136 debug optional xserver-xorg-core-dbgsym_21.1.7-3+deb12u6_arm64.deb cf90947b017522aaa5a53af17a922163 884584 debian-installer optional xserver-xorg-core-udeb_21.1.7-3+deb12u6_arm64.udeb 7be79f943a8b08d392a17a85384269f8 3591564 x11 optional xserver-xorg-core_21.1.7-3+deb12u6_arm64.deb 0c8a3f0fdbba9f5951a8f58d88149302 2554088 x11 optional xserver-xorg-dev_21.1.7-3+deb12u6_arm64.deb 73cbe807ad9e4c7573b28a36b3480def 9472 debug optional xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u6_arm64.deb 25ec0dd1c770c7a0328806d533d3f7a4 2388048 x11 optional xserver-xorg-legacy_21.1.7-3+deb12u6_arm64.deb 1018ce4feaaa41ba9622448c87d4b141 3200296 debug optional xvfb-dbgsym_21.1.7-3+deb12u6_arm64.deb d192a35231b19a5fb476cbea07a2f9ea 3082776 x11 optional xvfb_21.1.7-3+deb12u6_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEU81tY/BC8e+eAeWhLffeOnPnbLUFAmYOg1MACgkQLffeOnPn bLX2zw//TBn1KL0GQPH+hN2odQ+G4n5cDCUSVHd8SRrIH7EyYxqY2BnBR38RG8TB 1cpd1K9HbNYZpWDX22fhCpuF/sT7Smvp6TgdH9jEZX65vRTYBedEijoB405OmcYu K1+lqjQdAaPgnPjp4Z3UD0pCrSkdy9iwBdFwNzmqiUijcbDxclIb/MrOkK2SR+QA 9aN+EOP74enXJdfmHbFy1lqLheFGmeBXm42HnTCgZQjqFbB3AlkUcC48rVNTJzVx rtBuyom69uRwoFd/GFvHzb3OY5nsSn5jd5lzfpYgzoDGM0StIVHA3JK8RE8di0eR ErAM3zWwa4+o6S/QzF7UWC0T/9yD7w/tv80TM28O+JLaMyWA6TAtCOZ8OqqxJwzw VxpoYB8hY/r1hiZgZhOUjPOBEJKst/waOZGcpuRzvCvBB9Z0ImZ1agNDhQZhF9W9 0nJQjdiFJ+9tGXWxPFAjxbQ4EeY+weck/zhV3tWSr5k5KO9J+MeaUGt0lZ0TabQE McdT3w6s8eSmo8Xzh30VOYyloLLufv1l/rH9VesyMEjbSs4Fl2bMQh49aEzr5IFE mCEvkLAHpHySNa1MMoiHaZ9Ja+svIStsiKsMIm2kNIxyujWDwj8gWpP6lWH8+W0j zzItvy9+kztlw1wlfmvpMosJPmRtVlo/WVhm4pgDxN6rrGnyNqM= =5spn -----END PGP SIGNATURE-----