-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 14:06:35 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: armel Version: 2:21.1.16-1.3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-ubc-04) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1138680 Changes: xorg-server (2:21.1.16-1.3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680) * sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680) * xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680) * xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680) * glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680) * saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680) * dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680) * dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680) * dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264) (Closes: #1138680) Checksums-Sha1: 45e8b3a2c296eec675a7ddcaee78c8e86e4855e1 2712448 xnest-dbgsym_21.1.16-1.3+deb13u3_armel.deb 350556d98fffbfb3b8929a937ac656ff5429f3c8 2932940 xnest_21.1.16-1.3+deb13u3_armel.deb 56873ff3360abbe7e33ae3dbd804c673fdb71c73 14800 xorg-server_21.1.16-1.3+deb13u3_armel-buildd.buildinfo 556c9d311b1cd234ef71a167901f9293e9a5f3f6 3965492 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_armel.deb ff855ba6156e1bb17291725d395397f0ba7e2be6 3161480 xserver-xephyr_21.1.16-1.3+deb13u3_armel.deb 7f9efad8872ba464d05446429c6d76087b7961d2 5771840 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_armel.deb 3fd0e866c87f28ea3ead629a05f0d25990c21d8a 814268 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_armel.udeb 1a7cc6cdefc4b7f46f59fc93301135e34d0cf7b6 3510512 xserver-xorg-core_21.1.16-1.3+deb13u3_armel.deb fe7400881bf2f2d80c1694c547cd9ab8dd4c9a0a 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_armel.deb 958b9818cc163a1d4c6573d0f39cc4c5bf885a02 9504 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_armel.deb 6526d14a57bf37ac78d37e5f18bb7c6305328536 2415416 xserver-xorg-legacy_21.1.16-1.3+deb13u3_armel.deb 9aeb8d2df44fe5f359841f9248b153d1e2cc7d12 3290808 xvfb-dbgsym_21.1.16-1.3+deb13u3_armel.deb 69b6e7229fcfb248c6ebec6d9142b1a2a25847d2 3046476 xvfb_21.1.16-1.3+deb13u3_armel.deb Checksums-Sha256: 96a2b7dc67bc57dfa05b3df040fca3c40e17ae072f66b66455090b08ba738a73 2712448 xnest-dbgsym_21.1.16-1.3+deb13u3_armel.deb f2e50c8d80b344144cf7bc422dac374664706a2a9b3dc5d2c91ea2552a47d222 2932940 xnest_21.1.16-1.3+deb13u3_armel.deb fa0ae677f68e8830103fd2f26900ee13929025ead6123e325870252bbe334d73 14800 xorg-server_21.1.16-1.3+deb13u3_armel-buildd.buildinfo f6c182d737b8b585f4f5836f94f6c2bdb28166a580449a08af9d3b8e6a9af147 3965492 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_armel.deb 33adfef3dc4af051802d12cc3272280e2eb0d4a265d6942820ecd5a691734d24 3161480 xserver-xephyr_21.1.16-1.3+deb13u3_armel.deb c6231b0e7fe3c6d4f3f57a09e3ab20cbc8b2993e8d4add353d1d9123284e7f4b 5771840 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_armel.deb d4f977429d78f5cb24794fe3aeee891991fe8a4a05de63d0215f8b83050435d6 814268 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_armel.udeb de171e653dec11018785e4f379372c3902871e0b4ce4caad4dd12c23f3e17f2d 3510512 xserver-xorg-core_21.1.16-1.3+deb13u3_armel.deb 366bda38c90b625b9fe95511030c77c256c8115e8ed5ee356fcac2271aaa720a 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_armel.deb ec1a2c05368bb3fc64abf2af87b163cbd653ebd74044e98335f2a6ed40b148d1 9504 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_armel.deb 19035403e763d5673637f79484580d8be8431c6916ce3c6556995908ddacbf7c 2415416 xserver-xorg-legacy_21.1.16-1.3+deb13u3_armel.deb 9d6d61794726e65abcf3b15db60a1586f9574e4f7790f11a149787265df55a12 3290808 xvfb-dbgsym_21.1.16-1.3+deb13u3_armel.deb f086b152e4c057c3676451ce8b5f7e566e7c15da4b8d50c7b6653eca74f7238f 3046476 xvfb_21.1.16-1.3+deb13u3_armel.deb Files: 2c026b3543230417a3be49ff75554b64 2712448 debug optional xnest-dbgsym_21.1.16-1.3+deb13u3_armel.deb 055e38a9e0bf337047808a6724e71caa 2932940 x11 optional xnest_21.1.16-1.3+deb13u3_armel.deb b602d26f7a3e2e5e7faff63fd3e08f9d 14800 x11 optional xorg-server_21.1.16-1.3+deb13u3_armel-buildd.buildinfo 1dbd2bd082e2bc314e21d5a36afa898c 3965492 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_armel.deb 869e46352bbefbf36f032d90b64c73c6 3161480 x11 optional xserver-xephyr_21.1.16-1.3+deb13u3_armel.deb 0712caaa21f6d0749eea41ddb9e7ba3a 5771840 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_armel.deb e027ba553233224ba52f715dd25e6ec2 814268 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_armel.udeb 99df64d7a8d7fde138650630b72765de 3510512 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u3_armel.deb 77823302fbe453c6141a6791b1f047b7 2581580 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u3_armel.deb 3e4abca04d6affeb9a91c496e58cc1e2 9504 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_armel.deb 6d8ea295ce6cfe1ea4cffed0d6b5b996 2415416 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u3_armel.deb a2a86e457a1154581190f73ac905e5e8 3290808 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u3_armel.deb 26feb781f3c6a8d8707be7bf9a0e3316 3046476 x11 optional xvfb_21.1.16-1.3+deb13u3_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmo8LmUACgkQK1PZBedP sprZtg/9EvMmPHgCjWji5bLA+Rf4WFnsERnApZ0b3PCywsPkQonorqYPmBnby8tT M8HxSJpmUcIXJyxWroqDJIVMFaM/jrMhvKcAa48uQTP3sghVQylRBDrqabVxFcjj TTAx7EqlQ94dJEvv6VtHRKnKPErH3Y166GRSufTJrrPL8Yr8YfGUeCIiMEQlkdKs IHI+HT2zkP9sdWjzEj4hOgY1m89bnWvDVDFmgRKNmKNzFmvRQb2VuKevqb5//N+8 rl3wrmPGYzWo4q6OiPWai3DnGp9LeiXLm086KAOhivNIDXlCVCAfxxEB+3DFvbf7 w6p370Zrgr8v8sFjXh4cF4RxyVlRhFEc5BvJ8gBe5V67GF7E/Dv073Rd9EHPiM3L 1iD1errZ3mHnFcAQOiRDbyZf5YPrPOcejKvRj2kq/mvLZIUhWWXeK+L9irCvS7my TJImqKZNm8/h1o79ei3RLGKUJpRYAWouXQsZCNRGkxpbPFeUAGhI6XSF1fyKRm55 XnyRuCe4kwfup7gAryevY8jcmb1IRCUdvo+e4T5iXvEQJZ4+MyH52YAdlUDMWeKt m6GVGgEgKzl8g48tJnNDbauQfsxZ02JKmMj4T+jxDwpjpnh0t9FuoVfO3C3vxKta /l0x+JiPGuVDRL2KlLGIqx3ewXtcnsSDAimzSoU6cmCg6DDNoX0= =rXcn -----END PGP SIGNATURE-----