Accepted libx11 2:1.7.2-1+deb11u2 (source) into oldstable-proposed-updates
- To: debian-changes@lists.debian.org
- Subject: Accepted libx11 2:1.7.2-1+deb11u2 (source) into oldstable-proposed-updates
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 12 Oct 2023 06:17:41 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: libx11_1.7.2-1+deb11u2_source.changes
- Debian-source: libx11
- Debian-suite: oldstable-proposed-updates
- Debian-version: 2:1.7.2-1+deb11u2
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=ynGQFTlQJ+7fj6v2zfYUVT9w1trBT6+fCdlh5kyFTpM=; b=sXzBjK7ExhFJmPNOKtpsjbeISt 2flrYxnStFS0BLbTo7GdUAo3EGU6M4Fsx3Y8RQ7XGXC1ijKtR6dsTuxDfOMpKp2L9gJzIn1gIL3xA Qn9gv9LY0ni5D3BDD1+ZFAbKDHOyNuRpMUuHIyw+x7cvvFSyniXxiWfEtDMjSuclu7R8km+BEDVgA x20/ubb3uqgJBUffXZGik8e41IHkVShywZKNiSO1uaX7eo4NMp8Ptr/v1BatKVEdNRQ4NbG7Mt4HT mJJS+ITRTnb9+T/AbQlm7wON/MHN9VFEa2JPHyHQDMJ+tVem8qPQ2IirT8a0RFFLQcer8xt3KsHvs mU35FaHg==;
- Mail-followup-to: debian-devel@lists.debian.org
- Message-id: <E1qqp0v-002V5G-GS@fasolo.debian.org>
- Reply-to: debian-devel@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 03 Oct 2023 11:01:59 +0200
Source: libx11
Architecture: source
Version: 2:1.7.2-1+deb11u2
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Julien Cristau <jcristau@debian.org>
Changes:
libx11 (2:1.7.2-1+deb11u2) bullseye-security; urgency=medium
.
* CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
* CVE-2023-43786: stack exhaustion from infinite recursion in PutSubImage()
* CVE-2023-43787: integer overflow in XCreateImage() leading to a heap overflow
* XPutImage: clip images to maximum height & width allowed by protocol
* XCreatePixmap: trigger BadValue error for out-of-range dimensions
Checksums-Sha1:
020823fa90df3804a47ab1e0122303583fbe0c32 2600 libx11_1.7.2-1+deb11u2.dsc
670f1290da9c665539f0b2c48fe8f5abed2392df 82069 libx11_1.7.2-1+deb11u2.diff.gz
Checksums-Sha256:
2e7312dd3780fb6bba6479d1a601aaf80a876771dbe15bcf99b3f35d813785eb 2600 libx11_1.7.2-1+deb11u2.dsc
b32103fea010d9a931d7b00f6f8c2fc05acb3da0fb8a5e26f7c4aab12e07f81e 82069 libx11_1.7.2-1+deb11u2.diff.gz
Files:
a8aa9bf30f7df4db0297b027f801fda8 2600 x11 optional libx11_1.7.2-1+deb11u2.dsc
18bcd0bd4ced87a877a0200b01f8ad83 82069 x11 optional libx11_1.7.2-1+deb11u2.diff.gz
-----BEGIN PGP SIGNATURE-----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=zQW6
-----END PGP SIGNATURE-----