-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:36:53 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: i386 Version: 2:21.1.16-1.3+deb13u2 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.16-1.3+deb13u2) trixie; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: 3899b94d6a57c160c4ed276b06c72aea5d46248b 2527668 xnest-dbgsym_21.1.16-1.3+deb13u2_i386.deb 9f1342244c200bc4eb7a2da7e8e8f3650020e292 3099004 xnest_21.1.16-1.3+deb13u2_i386.deb eb2c0806d398081bb487da2854b05a738e172456 14699 xorg-server_21.1.16-1.3+deb13u2_i386-buildd.buildinfo 5f5da418172d12b48d8f8796076e6a63c5e6e8cb 3692176 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_i386.deb eb5137995571bac2072d20966a5dc90e65954d27 3398284 xserver-xephyr_21.1.16-1.3+deb13u2_i386.deb fc4717f53e943caee84e8647f9c5cffa99de3d7a 5447512 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_i386.deb 6ad5cc011edc9b08f06d213dff2dc3ee12cc81e5 1035184 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_i386.udeb 9992ec503c5e5609fff9698a8f6533c52fb942a8 3840796 xserver-xorg-core_21.1.16-1.3+deb13u2_i386.deb 54ff69652526bf84e649844c12966dc4d75640f8 2581104 xserver-xorg-dev_21.1.16-1.3+deb13u2_i386.deb b075935bf953e1078de59c00c275c9e95c350120 8708 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_i386.deb 3c38e4e963ebc4cc71ec3e8459f9c0257a587deb 2415116 xserver-xorg-legacy_21.1.16-1.3+deb13u2_i386.deb 523f3b2a253f9679b2e594ae3df483bd5953f315 3068312 xvfb-dbgsym_21.1.16-1.3+deb13u2_i386.deb 1da3aa0bd864f38c810f2f16b88a0ab2c93376ac 3246916 xvfb_21.1.16-1.3+deb13u2_i386.deb Checksums-Sha256: dac2725583ff1d58ff9aad410b5d2fcd704904771db9e8dd5cc50186f911d580 2527668 xnest-dbgsym_21.1.16-1.3+deb13u2_i386.deb 92cfdbd11845c0570b94304a77c2751d86a6d7e12d3f449cff8794edbd3dbf5b 3099004 xnest_21.1.16-1.3+deb13u2_i386.deb b0949518a4d15e60e34238a751b693ee3a2a9d83d7343d06eb565f2ba0df9322 14699 xorg-server_21.1.16-1.3+deb13u2_i386-buildd.buildinfo df330e38c023259e57a1866d7ca065563efa0ffede9cdfc3e6a6e0b3b8d04f60 3692176 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_i386.deb 533fd7d2e3e4c5959583a43757513d1d6b9e2d6e4ad66cb3c6490a45d419db8d 3398284 xserver-xephyr_21.1.16-1.3+deb13u2_i386.deb 98b6dd9a37cd54299cfd61848f43628163d4a77f87f0ac059d45da4adaffa4c0 5447512 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_i386.deb 5239453801e33b310228622a1f271f813824089630f253150525a24a1c895ded 1035184 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_i386.udeb 17f67de043522c6af7da7101589f913a60188a8cc22fb35a49209999340ac117 3840796 xserver-xorg-core_21.1.16-1.3+deb13u2_i386.deb fb05b84b76188815a06e60f7a117f606d6d3f92188222a5212068095c64845fc 2581104 xserver-xorg-dev_21.1.16-1.3+deb13u2_i386.deb 9542a9e6c422eb81c02f7602b4291073ed4e9e9c74eb5c8e1a5a6140353af652 8708 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_i386.deb cc4f7966cd0cf2670c24da2f30e888493a4c58650db03a3bd2648357c440c48d 2415116 xserver-xorg-legacy_21.1.16-1.3+deb13u2_i386.deb 20d3ffead6ab254350bee546921aa74b7a6614fe3bc60fc297d134162df51993 3068312 xvfb-dbgsym_21.1.16-1.3+deb13u2_i386.deb b6d20adf02e5497836a94518733e0446275fca3b0c7812bed5ab5c96b6cbc5d9 3246916 xvfb_21.1.16-1.3+deb13u2_i386.deb Files: b5ec43d83a2f18b79672bd8d472fc516 2527668 debug optional xnest-dbgsym_21.1.16-1.3+deb13u2_i386.deb 823a3e46269e18c161c42a728c911c40 3099004 x11 optional xnest_21.1.16-1.3+deb13u2_i386.deb 5613ba5160e27cf563c67210e23b3ef9 14699 x11 optional xorg-server_21.1.16-1.3+deb13u2_i386-buildd.buildinfo f0de5b2b361d415aa627da84d8625484 3692176 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_i386.deb 2fc10eecec5512178e234c4d9fb8301c 3398284 x11 optional xserver-xephyr_21.1.16-1.3+deb13u2_i386.deb c4da8568a12bff69c53146ee7176e6d9 5447512 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_i386.deb c99184f967d8ed0772efcb931cc243ff 1035184 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_i386.udeb 4651173f59a88463ec433f9594be39c7 3840796 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u2_i386.deb 46933ca60e583c79f30150cbda5e0a1c 2581104 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u2_i386.deb c96c6e2437926e203d70eec0593b3a85 8708 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_i386.deb 62c3bd6d6d3577afd65d7254f684aed6 2415116 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u2_i386.deb 1fdae3ce0c7031d3a83f6bf5dc94c428 3068312 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u2_i386.deb 1818f0cb8a816a9ac25d48f77e9a95fe 3246916 x11 optional xvfb_21.1.16-1.3+deb13u2_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmnz4/gACgkQbheoBegw XLItlRAAifncENlaUarSjeFgonBELwuNYP06Au/sGv/s88SH4qbiamipjRNbWCp/ CQxx2jlchYMOuFvhKoXh52LbvJsUkHdbEhs23NiyjFZcrCiAzQReIleboSC+9Vh5 jA9oyBpHDhbfBg+shG0kZ8dWv+uWnqW6Wl9pzhSqaweLj8gspNTNqtjpjqH4V4PB tZOIoUdOOIB1AHYyIxarZC2dVroDBT3vPm9WPgimNw/cQve6Hp8ihqvWS//I2OXa BHwAb+uRpXW7eb8h4ou7V/KhTmOHmsJhKi7nUbp9X62O/zLUNos9KCIYOSRss+Ow IYCDWzwpJuSKIeE/wT4xza2gl5pVULOlVuY2p7H8A0onvt5tr9iOmE/v0S4kAJzR Y7tx9fbMhlx2RsYU7CNCEQAb7/Be8xio5u1hO1ZOvOMr7KFph6fC+6Qj+WLsNNwX UXgFtyIZ6T8xz7VisV+pHoRjc4ivrTH+d0Bp1PtudUf2FWo1vKKZG9H4IhEt/wq9 VfV/esg+NVEpqTf1LWioB5/TNhK7cbjqC6SKdNFyhpRNO4mluO0VNTE+j1ms6jlM 0i12aUTi7U2sWjLmMjU3j/RuG7/5fjmIKyS1SbYGMgMrB1T5cdIEzF75DsHw191L SPBI5YcXaUCZlAeP7Ia5oPnM7RfXJEGEgeazwT2pBnit5bzVAMA= =XlLK -----END PGP SIGNATURE-----