Thank you for your contribution to Debian.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 26 Feb 2025 10:22:45 +0100
Source: xorg-server
Architecture: source
Version: 2:21.1.16-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Emilio Pozuelo Monfort <po...@debian.org>
Closes: 1098906
Changes:
xorg-server (2:21.1.16-1) unstable; urgency=medium
.
* New upstream release. Fixes:
- CVE-2025-26594: use-after-free of the root cursor
- CVE-2025-26595: buffer overflow in XkbVModMaskText
- CVE-2025-26596: heap overflow in XkbWriteKeySyms
- CVE-2025-26597: buffer overflow in XkbChangeTypesOfKey
- CVE-2025-26598: out-of-bounds write in CreatePointerBarrierClient
- CVE-2025-26599: use of uninitialized pointer in compRedirectWindow
- CVE-2025-26600: use-after-free in PlayReleasedEvents
- CVE-2025-26601: use-after-free in SyncInitTrigger
(Closes: #1098906).
* debian/patches/03_autotools-enable-static-use-of-Nettle-for-SHA1.diff,
debian/patches/xfree86-fbdevhw-fix-pci-detection-on-recent-Linux.patch:
- Dropped, included upstream.
Checksums-Sha1:
a7c38e11e10c5113288bb67f27b317a3ad01755c 4041 xorg-server_21.1.16-1.dsc
a12d7fb7ef065cc2e2877f7b8e7bf054b41c0c44 8954623
xorg-server_21.1.16.orig.tar.gz
73a3ec36474b9f3094ba2877e7d279772d43f19f 178358 xorg-server_21.1.16-1.diff.gz
526c755197dfee18d49fda212a055c9850a35328 9655
xorg-server_21.1.16-1_source.buildinfo
Checksums-Sha256:
b821ee77fba22d7d68c556c5eab73817d3ff37c00f08cb746cf43980b4973909 4041
xorg-server_21.1.16-1.dsc
59fa52b63f6f8747ee2c4716decb29ced249c4c574e2a18c96b7d3b1420f7fd9 8954623
xorg-server_21.1.16.orig.tar.gz
b2a59bb0707e7687001fb1d44661934195297a00f8418e1fda60dc9d8989d66f 178358
xorg-server_21.1.16-1.diff.gz
09fe9ebbba49cc0aeab585d5e6d6c936c1b955f01bb7315808a52c5b34870a61 9655
xorg-server_21.1.16-1_source.buildinfo
Files:
8a34329d5d91a3f8936945d184bc3be4 4041 x11 optional xorg-server_21.1.16-1.dsc
4c220da8d47467a2cb555c437466fd81 8954623 x11 optional
xorg-server_21.1.16.orig.tar.gz
30aecc7ea11cefc592c7d06722806dc6 178358 x11 optional
xorg-server_21.1.16-1.diff.gz
674204199fca3641ca09fa5661e1ed7b 9655 x11 optional
xorg-server_21.1.16-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=yHtE
-----END PGP SIGNATURE-----
pgpvp2qJ6LAgq.pgp
Description: PGP signature
