-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:36:53 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: amd64 Version: 2:21.1.16-1.3+deb13u2 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.16-1.3+deb13u2) trixie; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: d4be0e24dd054f847347823c182bc89beda96ff0 2739596 xnest-dbgsym_21.1.16-1.3+deb13u2_amd64.deb e30fd214c507d37da2ae64fb327dbd9141b01e62 3051448 xnest_21.1.16-1.3+deb13u2_amd64.deb 61f26674ac90ddd631a18fd39e013ca30e5fc81f 14825 xorg-server_21.1.16-1.3+deb13u2_amd64-buildd.buildinfo ccff57a67943ba63b266bee0902663666798dc05 4041680 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 8944076af5cdfa819e12ad1d7f7ba7a8fbd8140a 3341792 xserver-xephyr_21.1.16-1.3+deb13u2_amd64.deb dd248fa057b891882260a449451f789522eb3428 5923472 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_amd64.deb fb19ff94858de3b061f3622e3d43162a85f08beb 994564 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_amd64.udeb 4e0d2dd68a543dd0a76e8fd8858a5c6e98ce5098 3777888 xserver-xorg-core_21.1.16-1.3+deb13u2_amd64.deb 1bbe7153ba43ccebc72448882e0e04d51f943562 2581112 xserver-xorg-dev_21.1.16-1.3+deb13u2_amd64.deb ae884ef63738a8fe782918c94c8fbe3f809db6ba 9076 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 489f25b65d45d198c4197c8a101714ac17c3ed2e 2415116 xserver-xorg-legacy_21.1.16-1.3+deb13u2_amd64.deb 7b40f7df0336dd4b549b888470c3fa80e9c8ee6f 3355316 xvfb-dbgsym_21.1.16-1.3+deb13u2_amd64.deb ec5585c06d90db70a0d0f6cec3e40ef43cbdde65 3197848 xvfb_21.1.16-1.3+deb13u2_amd64.deb Checksums-Sha256: 312973380c44289f2018a0940df998f6fd1c060770be7ccd5a8b212531b6068c 2739596 xnest-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 1a62d90006aa7ca652cf2c2a19cbefc441ee65e40afb2e4cafe2b5b28d618cbe 3051448 xnest_21.1.16-1.3+deb13u2_amd64.deb a8e8f126d827b8487ce294ef68dc65a889007da277f6eb67ae72e696910c8ab0 14825 xorg-server_21.1.16-1.3+deb13u2_amd64-buildd.buildinfo 1c9ae98bf859c67af478ae3674b0b3a403b071e37dbb5e676d231ac56ce98229 4041680 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 297581e11c8f37a440a32a64783e388c097feee6fad10e7410eed6f722cb3dbb 3341792 xserver-xephyr_21.1.16-1.3+deb13u2_amd64.deb 23497effeb10c66eae950170b218bfbacbbcd811721b105b2c00bad7c67f877b 5923472 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 13531a1018f95c6f642581cc1c0a17be5d0521deb0a0954cfb83aeaaa755eca7 994564 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_amd64.udeb 7b1d953da42d79c3fff6b46066cffecdaafe9591b5f6f0e11197d42a92963a95 3777888 xserver-xorg-core_21.1.16-1.3+deb13u2_amd64.deb a0d56d4e002ebd0b6e3f479d5f616d8c127110968a7ca1b99950f644350d9c7e 2581112 xserver-xorg-dev_21.1.16-1.3+deb13u2_amd64.deb 43e01a6d8f1d6e7cc4563b2f4b25548c1267275409ce38488c6d7ed598818935 9076 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_amd64.deb c593fcd85d9883f1ff6db3bbf23a1e30179c37f86a3b0357fee7cc28c1347c48 2415116 xserver-xorg-legacy_21.1.16-1.3+deb13u2_amd64.deb f3acc84dd1d25c30a429317f8872f2b7f91ea1ee3eed1b884711d7e12731dad2 3355316 xvfb-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 1a75e0e97825de3e19c9797ddfebaefa72e486a45f900aefdadaddb7d28e8a95 3197848 xvfb_21.1.16-1.3+deb13u2_amd64.deb Files: 04e9cb2398123d04d53012036c35f105 2739596 debug optional xnest-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 845ac1170b233bc9741c06edc41edcf1 3051448 x11 optional xnest_21.1.16-1.3+deb13u2_amd64.deb ba05f413e3de909db874def9de1b6ff1 14825 x11 optional xorg-server_21.1.16-1.3+deb13u2_amd64-buildd.buildinfo b15a40b2defc9696530b7bbc303a8e59 4041680 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_amd64.deb e8e17420c0b8d909bc071eb00482243c 3341792 x11 optional xserver-xephyr_21.1.16-1.3+deb13u2_amd64.deb e384297f75a9d8f7ffecbec2e3c8b91f 5923472 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 2a7bd3ee18884010bf5a0bb7bd571b16 994564 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_amd64.udeb 1c94d1ed23ea977395d8ff38cd63be74 3777888 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u2_amd64.deb 5f2a3de33c56089e5771a35c2b28c971 2581112 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u2_amd64.deb 5fb829cdb57c3a768961d4fcd2bc7ac6 9076 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_amd64.deb 2675a4cd545d5359a35bcf13c8b49049 2415116 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u2_amd64.deb d1870375b62ccc2c4dbe2311b5d56e14 3355316 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u2_amd64.deb b11f78f2908c82d929ceeed99989be38 3197848 x11 optional xvfb_21.1.16-1.3+deb13u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmnz4swACgkQPkCWRKsh 20dMIhAAri4s6CTl4z+YCyMh28C7R8M7X9AjJ2YzmazDNVwpX0UPDWJG/bifWRUx jxgDGGuxFnKYt+0xJcEThMjdgNorazdygxpMWZWxAyvca1mN/BbGp+upQfrNDAEP NpULE+KBsmy3xknbc/yvVkq4G8mAUuAkarkEANXb16gF5A7PbrV+ZKI1tPJ825C4 jFrUjbhSdMA+0C/jo6KnhHspwJBHSYqdE53ziNJ7uWMvrDtbzmmWksFzJYjRjsqi zVBO4e6kHD49rwSVu97dnuYULpasY/POOZlwY+vVxXiIC+geNkMAsQSy88XPO+DJ hhEsapGXNNMoQZ2FeCc6SvLtGuDJk+ohxG4Tb2bT6wDWIbas+VNcoXoHqWZfZvgD PXGQYoYLrNUuRU8WApTd7JTsNEFs8cXwM+Cp+qosotcr7GJWTyTZGmncuTIFtOw3 +2Co1gT1a+ut3++ab/MODBYcGUW2OHDzWy0iYnuKVUvOCpZVHtHhM1ubDTswPLil 5nTo84xGALg1lfc9nLAwbYtHkCcnVIpHHy0UTA7f+laAPQOE8mOJDshSEa4vXOjV cI7FlzjPaO8eoN8qck0zJnRpuw+f0xqst3n63oJ7HqTvy2uVh2Ibc9hM2fsIo4u+ GQy9COCZmiNC5jmqFPK298HHuOB4wKHCHMRmrzbhzU+JwF1wyi0= =BlP+ -----END PGP SIGNATURE-----