-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Apr 2026 02:36:53 +0200
Source: xorg-server
Binary: xorg-server-source xserver-common
Architecture: all
Version: 2:21.1.16-1.3+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 xorg-server-source - Xorg X server - source files
 xserver-common - common files used by various X servers
Changes:
 xorg-server (2:21.1.16-1.3+deb13u2) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999)
   * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000)
   * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001)
   * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002)
   * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003)
   * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003)
Checksums-Sha1:
 69bfc75728629f20ee959715c9aaee80ab0e071d 7517048 xorg-server-source_21.1.16-1.3+deb13u2_all.deb
 76a310547ede6c324f0e7491e0ad4add858b3fc0 11584 xorg-server_21.1.16-1.3+deb13u2_all-buildd.buildinfo
 6ca02cd104a4982d79e838efb274fa0865c0ed23 2409692 xserver-common_21.1.16-1.3+deb13u2_all.deb
Checksums-Sha256:
 542f6a3e3b774a36638b727a86b1b308462f8b9741d96ee2f78e3717e3e12d92 7517048 xorg-server-source_21.1.16-1.3+deb13u2_all.deb
 9566a90010a33e333ad86e27c31eed769b191336d021ba4bba9c6c7f2240d7a0 11584 xorg-server_21.1.16-1.3+deb13u2_all-buildd.buildinfo
 6e62943c6903e5b0cc64225551d8a02f9f1ff62753830c5435f6ecb865b4db8f 2409692 xserver-common_21.1.16-1.3+deb13u2_all.deb
Files:
 7bfed5e62b413a1bc2dc260547213dfc 7517048 x11 optional xorg-server-source_21.1.16-1.3+deb13u2_all.deb
 d53e24e2983204a460c51ef5bbeeb045 11584 x11 optional xorg-server_21.1.16-1.3+deb13u2_all-buildd.buildinfo
 adcd4de15384743e09c9b08137f20a55 2409692 x11 optional xserver-common_21.1.16-1.3+deb13u2_all.deb

-----BEGIN PGP SIGNATURE-----
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=h9Dx
-----END PGP SIGNATURE-----