From foo@bar  Tue Oct 27 08:30:03 2026
Format: 1.8
Date: Mon, 26 Oct 2026 19:58:16 +0100
Source: libxi
Binary: libxi-dev libxi6 libxi6-dbgsym libxi6-udeb
Architecture: hppa
Version: 2:1.8.4-1
Distribution: sid
Urgency: medium
Maintainer: hppa Build Daemon (pad) <buildd@pad.parisc-linux.org>
Changed-By: Emilio Pozuelo Monfort <pochu@debian.org>
Description:
 libxi-dev  - X11 Input extension library (development headers)
 libxi6     - X11 Input extension library
 libxi6-udeb - X11 Input extension library (udeb)
Closes: 1148965
Changes:
 libxi (2:1.8.4-1) unstable; urgency=medium
 .
   * New upstream release (closes: #1148965)
     - CVE-2026-93541: OOB read in XQueryDeviceState().
     - CVE-2026-93542: OOB read in XI2 class parsing via size_classes()
       and copy_classes().
     - CVE-2026-93543: OOB read in XI2 class parser.
     - CVE-2026-93544: OOB read in XI2 XIQueryDevice reply parsing.
     - CVE-2026-93545: OOB read in XListInputDevices()
     - CVE-2026-94281: OOB read in XListInputDevices() class parsing.
     - CVE-2026-94282: OOB read in XI2 enter/leave/focus cookie conversion.
     - CVE-2026-109089: XGetDeviceControl Control Type Mismatch Heap Buffer
       Overflow
     - CVE-2026-109090: XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow
   * Update signing-key.asc.
Checksums-Sha1:
 bc8fe68e1938982ea16b0a359d7aa71adf02bd30 251488 libxi-dev_1.8.4-1_hppa.deb
 206ac95b26526bf790e9799e2953960aa41cda27 119820 libxi6-dbgsym_1.8.4-1_hppa.deb
 9c5eff095ad7f1917f2620426d62a391144b0564 27252 libxi6-udeb_1.8.4-1_hppa.udeb
 f8d3c4a413de4e29b02005cf352b5366992f3b71 90568 libxi6_1.8.4-1_hppa.deb
 150ffef0b2229fb45db38d01fe756755c8dd9c47 7592 libxi_1.8.4-1_hppa.buildinfo
Checksums-Sha256:
 c9f0243e047e70b64e394d37033fb5e804741fdb7a40fdce9b153f29fe5a9cf4 251488 libxi-dev_1.8.4-1_hppa.deb
 04a7e745a7618a672bd9d9cfd7fad172dba5067c5e5bb6edfd740af913a9140c 119820 libxi6-dbgsym_1.8.4-1_hppa.deb
 3208b89704a962c66a92271fde7f30e52ff008a8d322462e8450780de997ddee 27252 libxi6-udeb_1.8.4-1_hppa.udeb
 215ed49caf301308eb779d236c2bc3ccae1d9b5a6454b9fa324e0372fc969438 90568 libxi6_1.8.4-1_hppa.deb
 1e81a3f68d32ec37355fb496a362c571b20675130a20a6f1094002d86dd53b00 7592 libxi_1.8.4-1_hppa.buildinfo
Files:
 6ccc9d3bf54da06a532058f6266d470e 251488 libdevel optional libxi-dev_1.8.4-1_hppa.deb
 b3d2ba0d13165a67e6b498025f11ca31 119820 debug optional libxi6-dbgsym_1.8.4-1_hppa.deb
 7e2cade8ef0d9e0ea8137e49372b69e3 27252 debian-installer optional libxi6-udeb_1.8.4-1_hppa.udeb
 3d858c29224a0cd0e0b3d8b681467faf 90568 libs optional libxi6_1.8.4-1_hppa.deb
 cedf0dd1e0574266fa34c30f8dd15150 7592 x11 optional libxi_1.8.4-1_hppa.buildinfo
Signed-By: Debian buildd autosigning key for pad <buildd_hppa-pad@buildd.debian.org>