-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Apr 2026 02:36:53 +0200
Source: xorg-server
Architecture: source
Version: 2:21.1.16-1.3+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 xorg-server (2:21.1.16-1.3+deb13u2) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999)
   * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000)
   * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001)
   * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002)
   * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003)
   * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003)
Checksums-Sha1:
 5c43142c6171533236e8674425c196316a821448 4236 xorg-server_21.1.16-1.3+deb13u2.dsc
 9d6bfe8218d3b009eec4d723088045b55fee7cbc 194227 xorg-server_21.1.16-1.3+deb13u2.diff.gz
 3833b3cbeb59255bcf21ac75a6263cd64bffa999 8446 xorg-server_21.1.16-1.3+deb13u2_source.buildinfo
Checksums-Sha256:
 24b7f450723ca60990df1dec60906fb17e86501003ceab73bf42eab583b93fe4 4236 xorg-server_21.1.16-1.3+deb13u2.dsc
 30d45dfe68a1e2e6773815dc702a8120240558dd1912af10edd3c82f9c9b0ad4 194227 xorg-server_21.1.16-1.3+deb13u2.diff.gz
 6cc172ed6320f93729304ba3fc72b2f8f833ca63bd33811fbd2d774468b49247 8446 xorg-server_21.1.16-1.3+deb13u2_source.buildinfo
Files:
 255880f3cf09ed0496c13aa376acaa95 4236 x11 optional xorg-server_21.1.16-1.3+deb13u2.dsc
 73eff967d0844274cb60b7c628ce7e24 194227 x11 optional xorg-server_21.1.16-1.3+deb13u2.diff.gz
 e99744327801382e877386c568b508bc 8446 x11 optional xorg-server_21.1.16-1.3+deb13u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=N3Vm
-----END PGP SIGNATURE-----