-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:36:53 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: arm64 Version: 2:21.1.16-1.3+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.16-1.3+deb13u2) trixie; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: 74c3d4071a9a76162304e21985234cce895c16f3 2695120 xnest-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 39b6fb90638684fccb660717713150e84f1ea701 2996884 xnest_21.1.16-1.3+deb13u2_arm64.deb 51ad5d1ad31e02ac5e3fbc5f6a596199ba9b03f6 14878 xorg-server_21.1.16-1.3+deb13u2_arm64-buildd.buildinfo 4ef01fd162629b1712fd46059d73dfe15ebd703d 3945056 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_arm64.deb f43d1365c1952cb83ccfbe567a166e912a50c946 3245880 xserver-xephyr_21.1.16-1.3+deb13u2_arm64.deb efce8002ddb6f01d4bca8401eba5adf59aadb3a6 5793856 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 0b82d419b55818dadd375c5879a3ed14fe93743e 897560 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_arm64.udeb fa964c2f1e6515c02a33883ef73dd54db9047cdf 3639704 xserver-xorg-core_21.1.16-1.3+deb13u2_arm64.deb a33caf4f58bf43ca6d9621d08fe17cc214730a6a 2581108 xserver-xorg-dev_21.1.16-1.3+deb13u2_arm64.deb f3fe8ad714db3f4f310e5b55985104a5a6aa7a1e 9800 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 39307a17d454bd2a9d1543074f20ffd34a89b410 2415120 xserver-xorg-legacy_21.1.16-1.3+deb13u2_arm64.deb 9bdd215a4a9f4c9223c719d0ec5a517ff4b08f4d 3274684 xvfb-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 174fe92ed1e6a0c43cbf34a289c7d31750e91586 3122712 xvfb_21.1.16-1.3+deb13u2_arm64.deb Checksums-Sha256: 394dcdc288ab687032d3f55dc493a1de0137c49e00d1b7a9b91bad0046287633 2695120 xnest-dbgsym_21.1.16-1.3+deb13u2_arm64.deb c28ac3c30716e7f0ab15b580132800bb613c9b374a473029049959d60f55e728 2996884 xnest_21.1.16-1.3+deb13u2_arm64.deb d290e21a817349b5ef4e02f2627781abb2b27d0fcc82d0cd8a87859b11c4f451 14878 xorg-server_21.1.16-1.3+deb13u2_arm64-buildd.buildinfo 52e30a089d3e136d4f80caa23b7404786c144bf391ca61d78abbd77268f0e667 3945056 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 3a51d0d08a3a55d4eb8b87571873f5cf708ab278ac42b97ac72688590128fe08 3245880 xserver-xephyr_21.1.16-1.3+deb13u2_arm64.deb 859c1eb99455f3b970073337fb59aa594d807abcaf56b2867c30600794821f0f 5793856 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_arm64.deb d505d6af1eb8bc431f55eadb93352c035c249c52a68302b3c17cb36a877ffe67 897560 xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_arm64.udeb 6682f9d5ee519820f048ae479352714dd138642c5ba3fcdd1bfa275703e0f1c2 3639704 xserver-xorg-core_21.1.16-1.3+deb13u2_arm64.deb 941dbd467c27c9ecc3d09aa062008b8f9ed8ddf2915faafc8f258a2300613623 2581108 xserver-xorg-dev_21.1.16-1.3+deb13u2_arm64.deb 066a52d7401fa01e190cd896da97917ae488827f615558bef0b3ed5d033678a5 9800 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_arm64.deb da44bf9be01850098b8c324fe288ae1e4c79ed7ce57864955ea93501937f4536 2415120 xserver-xorg-legacy_21.1.16-1.3+deb13u2_arm64.deb 2942734d611a604d1c1cf78ca3f0f74d023d0b89fb7b0a01e6cb87084ef7c0d2 3274684 xvfb-dbgsym_21.1.16-1.3+deb13u2_arm64.deb ebb073223475001cd77f6d37d3d0f24cf5f26ec19b3bed2a1e4b5429e4e44ebc 3122712 xvfb_21.1.16-1.3+deb13u2_arm64.deb Files: ba4c9c8c5088ede2b4d803cc5efc4047 2695120 debug optional xnest-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 0128609bfdf5d66118cc49700828eeb6 2996884 x11 optional xnest_21.1.16-1.3+deb13u2_arm64.deb f79d0c5507285f12ae36143743082bb6 14878 x11 optional xorg-server_21.1.16-1.3+deb13u2_arm64-buildd.buildinfo a1277d7c4a2f5332f7ef26026a37255c 3945056 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u2_arm64.deb c9cb47b6e994d6f832100369ea3c46c8 3245880 x11 optional xserver-xephyr_21.1.16-1.3+deb13u2_arm64.deb 789ed1ead34cfc30e29555fbda1ae17d 5793856 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 9116a302bea771420f8f6933f36ab295 897560 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u2_arm64.udeb 9d7a05caf853508d6060016959e072df 3639704 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u2_arm64.deb b20475d48e98eeabe2225c6c95c42077 2581108 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u2_arm64.deb 9a299839326aa445da9784305e6059c1 9800 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u2_arm64.deb e5f6d91d0645de36f15b58c5ebd3256a 2415120 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u2_arm64.deb 239dcdd72db8e95c2ffe28bce7449809 3274684 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u2_arm64.deb 4477fc561e0ba62a4fb8ff6374218f25 3122712 x11 optional xvfb_21.1.16-1.3+deb13u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmnz2egACgkQScpU3dYu lLiZKhAAjQQmZMPZPlamLgqA1oncbeUKo1I3P+Hp6zexPzlhuDNsU8KVUuZwXDjW g9x35jl2lbQ34tHr+gYo+Q4VoxKwV1UnoDFEodFk3ssUqHVJ5D+NYP8mstqgIVVM z12lBnkiInYV//d9dRES3VmI+sNukPo+ICFx2uAHdWAxDUmyqQCshsO7vPZCRTRm xU/zA5av2Do6ijCZwgIX0msCLPrVDEJ/jGDlFYkr3uA2A2JA9rR5F9yiKvUxBPy3 InUPky8rXw81+0pqII8Zi0l7HalcVIkgnEpK3Qnx4mhE0SUQabxy+Slbyf2gH3+d R0si8Loy28fDiXDMe2X6su9kOi6ldJFouTSUS3Kl1QQNxhRD+DgPHYoqgMUjKtZi XJf0S7dFdQWzccp1BOgW7rl6Nj2X2cEuR4p1WB2pKdk4SIUR7bqZ908i2GUEWy/m bp5Ea7e5QQkcafyup3SQ9lDrqSXEK15k1WptZSN5xn+AVysh6yK1aM0a6b9pY8se 3qnTmPZIuAZBJeHXvn2SwPH0TVTQzo8y+lHIqhBGn2joUyYLrVeSOQj70RuqgfYZ 4wdVgZQHXPxRyuR97DpxGwD6PrqAsv/iT4RuXhXK0FN2lZ2MxjE7LO5uHjjaFnnT 4jvlY0w/5yo1yILlVSww0OTq1cdxD+/fY4VWvqEO3nFM83kbpPg= =HS3D -----END PGP SIGNATURE-----