-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:36:53 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: riscv64 Version: 2:21.1.16-1.3+deb13u2 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-02) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.16-1.3+deb13u2) trixie; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: e0c1410cde470aaf0a1bf0b1bafeda8fe9c254eb 2685720 xnest-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb 23ac11b2df340e42dfaea96d9fcb2abd7e8e0675 3091964 xnest_21.1.16-1.3+deb13u2_riscv64.deb e9a952096dbb79b83a8c557832eed8fb732b91a0 14759 xorg-server_21.1.16-1.3+deb13u2_riscv64-buildd.buildinfo c39fe31d3d4192bf75508de147674c1d681fd7b8 3932360 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb 584290c5e02f714eff35454bee503137f733fe59 3381208 xserver-xephyr_21.1.16-1.3+deb13u2_riscv64.deb f298345d5c564fa7f45463e2edcf759d67c47285 5708952 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb cece9261c0f5c25e93b018395913dfa149a429cd 1009480 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_riscv64.udeb 9bab3183ce8f24d348249faf893bc57000d0c5ae 3811396 xserver-xorg-core_21.1.16-1.3+deb13u2_riscv64.deb 8f9b0aa5c4066b60976ba4634be845b948a8e556 2581108 xserver-xorg-dev_21.1.16-1.3+deb13u2_riscv64.deb 1fd234a1c8776b2c48e0fa55a62f86438282f17e 9572 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb b018d9af7b3b2cd69aa60ccfaed0657cb8785d23 2414896 xserver-xorg-legacy_21.1.16-1.3+deb13u2_riscv64.deb 59e7e7ea29e0d10835149134d6ad1b9bd7f9d30c 3282788 xvfb-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb e78035a0017a44f6add4c19292c6db16f1ac06a2 3240944 xvfb_21.1.16-1.3+deb13u2_riscv64.deb Checksums-Sha256: 1fc26b568bbddaed007b96ee4a475b640fd9a0ac3a9e2a5e18ce74c342a1a44b 2685720 xnest-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb ef24d0b01f46afb0616804727a9bcfdcd394fa31028b112d15b933fd39949569 3091964 xnest_21.1.16-1.3+deb13u2_riscv64.deb 2cff58cd905a23fa4b1016f9929f9ee62c4b557e56a424becef876013889033b 14759 xorg-server_21.1.16-1.3+deb13u2_riscv64-buildd.buildinfo 95a28179ece4f800a1bc8278fcb9c46c4fc0a00b0c4653238ef44889411b5df6 3932360 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb 2f381d5f3fc7558f9ce0f964ecd133d5aa8190aa48b905d614dda43ffc418d0c 3381208 xserver-xephyr_21.1.16-1.3+deb13u2_riscv64.deb 3779c5825a620e92f2226cd5dfe8b2029e1e5d469d80d0cae6d7370bb152928d 5708952 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb aa3df8e89c8fb8485c30841c9c781043eb1e7f0aa831467615653332fc0d0157 1009480 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_riscv64.udeb 212dfc19aabca0373aaa1d56f32c4994572e46f400bbbd9156e66e22b2a5c354 3811396 xserver-xorg-core_21.1.16-1.3+deb13u2_riscv64.deb 8c7e3d83ce9f36a65a5c0d6a33c22960cb2c58f5215e8b9434b0f82c4c5f04da 2581108 xserver-xorg-dev_21.1.16-1.3+deb13u2_riscv64.deb f6a103d5684550f7ccbdd1fa7824f9db4dbdd599cddab41f95ebb53bd049bc07 9572 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb e9460320ffdc7b467e59fcfeefc52d6995cdabaf5aea6903dab88598047d43ec 2414896 xserver-xorg-legacy_21.1.16-1.3+deb13u2_riscv64.deb 978b0fd75fbe9a31e8d825ae1de70b1573eee89a7c6eb37f6c1adb7540a3b3a4 3282788 xvfb-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb 94a2e05ebada7db17262dd3e20d2d3ff64c50c2b85232cb02917b9fb92fa3b98 3240944 xvfb_21.1.16-1.3+deb13u2_riscv64.deb Files: 8cdd24690ceba3009f38511ba7133090 2685720 debug optional xnest-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb 3b72da6470704ba86d7d74cf35802a58 3091964 x11 optional xnest_21.1.16-1.3+deb13u2_riscv64.deb d6e9e6f6fb9cd0084beafe50b356db7b 14759 x11 optional xorg-server_21.1.16-1.3+deb13u2_riscv64-buildd.buildinfo 60eb98d415545379bf873e0f61cf3b84 3932360 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb bf50b9c59001d3c9109a7e2bddacbffa 3381208 x11 optional xserver-xephyr_21.1.16-1.3+deb13u2_riscv64.deb caea9f87a7a906bfc5ac2380adb62616 5708952 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb f3869b45cd0f886790f655a24f96acd1 1009480 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_riscv64.udeb ddb0d599dd2c350d14a9706eb18064e3 3811396 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u2_riscv64.deb 3f523c74df5e6f4c2dda4032f90cd9ee 2581108 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u2_riscv64.deb cf079de0405fa3d8ebb2d83845d1bd0c 9572 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb cd1181f9e37d7329c146580733548cd9 2414896 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u2_riscv64.deb 54c57ac4d712d5f5db41ff3a1bd215ba 3282788 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u2_riscv64.deb f6691a270699db25dc6f80806ea83fa0 3240944 x11 optional xvfb_21.1.16-1.3+deb13u2_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/AxPdLOtOshqz3vw/Fc5EAGpa+sFAmnz6SkACgkQ/Fc5EAGp a+vonRAApsysa09EuXZJ8lIL1U8/cBRTQ8ZMoEYXHgM59AuwoFayRRBfAqyMAazj /RhUfUoB+GrXLLPhcD5uKaJLF77KyJMbAAyrClHpzvzetBhR5gYHukhdG9BQNao+ G7K1TLJc3NVVVs2u6TceS8RJ7E6Zu6z0S2b7LJ78jsJwt6V/virgFSGgwFF2noPT KzQozxtf3XodefnsJcKv7u4hkHg7wW7fgn+zoslb/Ug1TEhIbcb2eQiZXwAX7NiC b5EwWjgFJiHc387wJ24nNvSluxncG4hmPRa2F6qXs47K3lON4RPkQ1lLbEvA8PXo ms8LEQtiBF8JgOeb4drZuVbCU8NftnZ49uQqucHNensd7qlWoU+hgr1H8lgVtjkL 1+0drKElmAZkHRW/SlEdcRSzIu7c7juN/pT/ORuBJrasfMX4mPGmtmboPO6sED8M Ks+WCfCP2utEoT8/EMMaHpWxB66HdZ7hsmDC+5T7YsIUWJ13XKUKEo2sYN7tny0Z LYNkYdZ2h6uW+akcavoM4A2pin1D5OIvVy/JfPe7XtDAaOdbSRWoFwsP+CaoKndi qGS5U2IAf/dsMCcYmBzAX8acRRQ+IQujWONRB9yhESodLxz1j8OIt4e1HSUBxSzN EI0LqGjxtP9JSwAm2VWs828fGEopjb56E/1KzGEZ8f2TpIfVO/4= =FVCb -----END PGP SIGNATURE-----