Accepted xorg-server 2:1.20.4-1+deb10u13 (source) into oldoldstable
- To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org
- Subject: Accepted xorg-server 2:1.20.4-1+deb10u13 (source) into oldoldstable
- From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
- Date: Thu, 25 Jan 2024 18:50:19 +0000
- Debian: DAK
- Debian-architecture: source
- Debian-archive-action: accept
- Debian-changes: xorg-server_1.20.4-1+deb10u13_source.changes
- Debian-source: xorg-server
- Debian-suite: oldoldstable
- Debian-version: 2:1.20.4-1+deb10u13
- Dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.seger; h=Date:Message-Id: Content-Transfer-Encoding:Content-Type:Subject:MIME-Version:To:Reply-To:From: Cc:Content-ID:Content-Description:In-Reply-To:References; bh=5z2m5CLwojIuY+vcu9y6nkIF+B69wSgnn5gX5SZsQNY=; b=iX5N9PQTe3v0FmaswM50zDDAFb abxitFbKu5A2oP+kNmP4wgeE2ZeURtvpsEbYF0yp6eW3NVanzu4DlVF0jiM6ae8+iHQx4y/HmZD+K +SJ7b1EY2S1KhQJ/2lNBE7QRwbDg9e01a/w3Zi79v/KTnf9Td7Jymnp77WZNctpxi27gyniFiJ6ht +6Ofq3dRkh/GxYOncTcwaNI0owA0VuVuWvwRbwF8je6KNaQ2Og/qbbq4dkco/F7u+VXMarJ/Sp4Ns LE4tHXVpkkaDvV/54nADeaCl7hOw8OL0tulAFLBl/iFAOWX+EHbjoZWVQNfqiW5MPkgnCPYidYhRM Hi+0QIgQ==;
- Mail-followup-to: debian-lts@lists.debian.org
- Message-id: <E1rT4nr-00HCJS-Ca@seger.debian.org>
- Reply-to: debian-lts@lists.debian.org
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 25 Jan 2024 19:29:21 CET
Source: xorg-server
Architecture: source
Version: 2:1.20.4-1+deb10u13
Distribution: buster-security
Urgency: high
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Checksums-Sha1:
ab256fba31529f0d6f6bbd75aca290b119faa7f8 4337 xorg-server_1.20.4-1+deb10u13.dsc
b4964b7014e3de7b5e29bdb64d2e9544f6ec4909 173611 xorg-server_1.20.4-1+deb10u13.diff.gz
e324a401852f8666046e488eaf6eeb69ca0a5c90 17815 xorg-server_1.20.4-1+deb10u13_amd64.buildinfo
Checksums-Sha256:
259b151cca01bf2a06bf5c125434d4b623a7ef93ef58e007f243187bb0ee4edd 4337 xorg-server_1.20.4-1+deb10u13.dsc
36e4bbeaef4d87c4be3e4917b1b290a35d184b0e730175539cf48211d0dc64e6 173611 xorg-server_1.20.4-1+deb10u13.diff.gz
79e4a99f06ffb850ed69ec33b2bf87c35145f34a078411cc5c8d09eb33d3fe3c 17815 xorg-server_1.20.4-1+deb10u13_amd64.buildinfo
Changes:
xorg-server (2:1.20.4-1+deb10u13) buster-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Xi: require a pointer and keyboard device for XIAttachToMaster
* dix: allocate enough space for logical button maps (CVE-2023-6816)
* dix: Allocate sufficient xEvents for our DeviceStateNotify (CVE-2024-0229)
* dix: fix DeviceStateNotify event calculation (CVE-2024-0229)
* Xi: when creating a new ButtonClass, set the number of buttons
(CVE-2024-0229)
* Xi: flush hierarchy events after adding/removing master devices
(CVE-2024-21885)
* Xi: do not keep linked list pointer during recursion (CVE-2024-21886)
* dix: when disabling a master, float disabled slaved devices too
(CVE-2024-21886)
* ephyr,xwayland: Use the proper private key for cursor
* glx: Call XACE hooks on the GLX buffer
* dix: Fix use after free in input device shutdown
Files:
e46b432c59a40b4a36f9fd3bbcac7e2b 4337 x11 optional xorg-server_1.20.4-1+deb10u13.dsc
b71330a9122457573eddeac4e1099173 173611 x11 optional xorg-server_1.20.4-1+deb10u13.diff.gz
40ec15ba9325ecf591a9b23a7e4afe25 17815 x11 optional xorg-server_1.20.4-1+deb10u13_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmWyqZ5fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD
RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp
YW4ub3JnAAoJENmtFLlRO1HkZ8sP/1/a5ybWvYVtjO6U74XC074lnptC+RINwLri
ogJ5dz0rQguZAfipK92dfpZ1p+WDJUf1PEC8xXh1Jc029rpAiBsMuYbc4NdQYBRN
brfDxHFWe7Bs8ndHrbW22Q7hTM1Rt5o9LZaFYphYZswXJHwaG76wm1wQICGJ8yac
C52CvmbAcdzpfTuMIf2c6YY4a7VNRr6KFpmK9l6dEMNJ9uZlBBFsTXDs6WUq0etw
Z5i7KOzesDBrX7b7hQ7UBYARRWL8uEzerMb6/EWPaVMvWVi72K0/oddb0TkLfICZ
KzR5IBYPZ3rCflB9L/tZc3mxpcvwgnyf2WRfvY7lzMGDFLETzjyT5myo0YRrz0qE
krvccDJ21O2FFmBrlyEMcP+iQQ0qcg6JaRuRuDqmQBCV1sQCcF2AV8j+9x8uV36n
87M/jIoEAWKq2i6Ip4B25GXcgzCiTUwQeGKHVHdBGdRoIN4tIB7HXFQ+ZQgP1gZ9
5rsJOJkUTPvB5cCFNMD/xJCzBVaWq1U3T8XbXwk/pIkYpIt+6m8eg9Whj9auFj53
iLPCbxshEKGCpwt83BeC7R+W4CcefTy+mYFvkpCPlph2JwpPthRKUeGF6X3Pns4g
yJVh9ejszaFD6QduFQ3nybH1NM60EfmvJSihWU/MWWGs6lLWCWPYsWPmLHXo8nk5
Qaf3rhN0
=fvLe
-----END PGP SIGNATURE-----