-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 04 Apr 2024 11:59:35 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: ppc64el Version: 2:21.1.7-3+deb12u6 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Julien Cristau Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.7-3+deb12u6) bookworm-security; urgency=high . * CVE-2024-31080: Heap buffer overread/data leakage in ProcXIGetSelectedEvents * CVE-2024-31081: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice * CVE-2024-31082: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap * CVE-2024-31083: User-after-free in ProcRenderAddGlyphs Checksums-Sha1: 05735eead5a215591b215cc8022c380d73ed43c8 2720360 xnest-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 678f993394f42ef7f0582a42bf45cdb48ae79b68 3082280 xnest_21.1.7-3+deb12u6_ppc64el.deb 763922c714072c51f3ed5ead66bad334e9c2b417 14714 xorg-server_21.1.7-3+deb12u6_ppc64el-buildd.buildinfo a04141bb4967459eba2a0f626ff998ac871b0c5d 3979636 xserver-xephyr-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 71196b2d348c4a660c0d8cb637f37af9515d9112 3379728 xserver-xephyr_21.1.7-3+deb12u6_ppc64el.deb 2c166ced84015c6bf49baf4ef58136863237dc4e 5797108 xserver-xorg-core-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 7b45dea8bc9ebde98a35021cb10fd250ba960d03 1042140 xserver-xorg-core-udeb_21.1.7-3+deb12u6_ppc64el.udeb 01a238749a53bf870e8d7471f806bfb1e252efcc 3825180 xserver-xorg-core_21.1.7-3+deb12u6_ppc64el.deb adc68a65d38ca44bf8aaed28a09be117c0613455 2554088 xserver-xorg-dev_21.1.7-3+deb12u6_ppc64el.deb 0a09082b4ef96ff82645f7a4c3d373c1204b7988 9732 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u6_ppc64el.deb c44d120699e7bc2050de9f99eb0b1926cb42e5ed 2388836 xserver-xorg-legacy_21.1.7-3+deb12u6_ppc64el.deb 920ed9e30cc756175061e57895950c6797623139 3294044 xvfb-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 43fd5023d0664331e28336750586aceeb1ecf21c 3233948 xvfb_21.1.7-3+deb12u6_ppc64el.deb Checksums-Sha256: de59df491ce5e35f522bd9a40648f3cefa5afeec142be43bf440eb24d76c4bd9 2720360 xnest-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 8e5472b91e588f58efb030af2174446817d791c99ad83cdb10457b11a12c7be4 3082280 xnest_21.1.7-3+deb12u6_ppc64el.deb 28ed782b3160f324ba06c25450b10a5d15683f5892acf499da34bda52e8ef511 14714 xorg-server_21.1.7-3+deb12u6_ppc64el-buildd.buildinfo 723fb86ebffa8a47f77599afc7d0cf840e4aa4603f68fac9ffe4ef1c8fd5ebf9 3979636 xserver-xephyr-dbgsym_21.1.7-3+deb12u6_ppc64el.deb c3372d42e279310e198abe74195e7aaa063b0b58b0dbbba9e89d3ed02ee1ce01 3379728 xserver-xephyr_21.1.7-3+deb12u6_ppc64el.deb 25ca32660b441a638c01a0897008123a49951946f6bce6033c88c2747659a148 5797108 xserver-xorg-core-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 01b6f3eed687510ffdaa08bb9e350c93c8e2560ebebd364edd6e0d4c31587fff 1042140 xserver-xorg-core-udeb_21.1.7-3+deb12u6_ppc64el.udeb 7462ed86c54aa7f49f98857c88a220150ff7d20cbdb4cfaa0c1017ebd2652c89 3825180 xserver-xorg-core_21.1.7-3+deb12u6_ppc64el.deb 746874cac559c1bcd8cfadc64266fdbb3713e929d9651386bc2d07e8c9707818 2554088 xserver-xorg-dev_21.1.7-3+deb12u6_ppc64el.deb 8df282e3eb0b283c07322ee3e7290cdc3ee2f6df9c37fea02dcddaf75e2e46f8 9732 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 2662bdd39dba6205f3b92249e91bcde44133376f87f79074b444f677f999cab5 2388836 xserver-xorg-legacy_21.1.7-3+deb12u6_ppc64el.deb d833e7693f9c6401a0a9de576b622009db260fa73134a8d9d7095f6af9cc7092 3294044 xvfb-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 8db8bc2bfc3e26068f8a97cb367d6ff3c0ad0fcc4f9e8e4183eb99587bdbb4df 3233948 xvfb_21.1.7-3+deb12u6_ppc64el.deb Files: 1902c23764a8058ee473edb5e1eaa1be 2720360 debug optional xnest-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 245e8c9a684fbeb1b3dd81cc4985aa05 3082280 x11 optional xnest_21.1.7-3+deb12u6_ppc64el.deb d29958c50bd547e6428c71d80b082e4a 14714 x11 optional xorg-server_21.1.7-3+deb12u6_ppc64el-buildd.buildinfo 3c96b0422c07f3811af3051790692600 3979636 debug optional xserver-xephyr-dbgsym_21.1.7-3+deb12u6_ppc64el.deb fc9a86b30a374294b69fe6ffb5917837 3379728 x11 optional xserver-xephyr_21.1.7-3+deb12u6_ppc64el.deb 484feb98581f7cb79b9c57c4a451658e 5797108 debug optional xserver-xorg-core-dbgsym_21.1.7-3+deb12u6_ppc64el.deb 1ee8b6fc473e5b9d86920398b51f1733 1042140 debian-installer optional xserver-xorg-core-udeb_21.1.7-3+deb12u6_ppc64el.udeb 4025d4285b5e94a398a4aef5d228eac3 3825180 x11 optional xserver-xorg-core_21.1.7-3+deb12u6_ppc64el.deb ef06df3a1af0ae2286bf7857a406690f 2554088 x11 optional xserver-xorg-dev_21.1.7-3+deb12u6_ppc64el.deb 9a90871c115fa8ac575cefdc51883f47 9732 debug optional xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u6_ppc64el.deb e82ecc90466d1919ce303970d7ff67b9 2388836 x11 optional xserver-xorg-legacy_21.1.7-3+deb12u6_ppc64el.deb 65bdff2754bd6e36a102910183d02318 3294044 debug optional xvfb-dbgsym_21.1.7-3+deb12u6_ppc64el.deb b2b50b65e9ef4efe03847ffba5292e80 3233948 x11 optional xvfb_21.1.7-3+deb12u6_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5hbnFkJlczvLwwS0Y7DdE4sWZ/UFAmYOg2EACgkQY7DdE4sW Z/WhGA/+P1G3RA2Nuc61Sgz6VcaGot2f62lprA2N8q6gaboL9sXQGvxrjMZOdoMp LRFhAmHewGxRopFPZ5Jfm7roxKv5ZtTpGTAR0Mn3IK1JFjf4CNBE/A1jG/ZhmC5O 8GlEYsiH7C2ry2Xs6/8SYSUE54+7jmgTyh2oHlhSXNP0552j0yG4a1qNGtcm4OhT wEz91+mQWgd/vRcT33C9Q/Cf3vM9dR355VsJqWwab8MzGC1Wy31ppZX7s1+LKx4L ytY4Dlmz31lecyeHWy95tcxq0kzR3IfjEXGDCoDR8fLzhKvbafSvp6rQ2Guoa8xK Oq0EJkc/JoPRPTMRv88TMv5lW1GmzWVvZD2948CO/Ge+QkHUxQSquwHqajxp2ldM IsgpZ7qg0uel7Pb6o3eWBtyYp4pq77YR3Xh0sLjtUxpmxP3QM0iilRO7OPSAWSAc +E5gdEOW9GRNyteZvORomK+rYa+wZXvsWEN5lqX2dEDu+T1+i7+6BIu+3AhfZ/In ajDGNghRJsx6fKZyTNPQUj+/ReEEYbXlH55yMItHoFPs0Q3az9KZIMKHycfu9QsY TJRl9Sf8NEVckX+IGhri4x+fs4ER7vE0UXK3V5yhOEKUqpwuoDiFh08lAu1Rkhk/ DxcDGW/pW8YXvpcJBY632i1ED7Z3WI8Tg5zq5pGFKdYg9dq++Ss= =NwpZ -----END PGP SIGNATURE-----