-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 14:06:35 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: armhf Version: 2:21.1.16-1.3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-ubc-03) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1138680 Changes: xorg-server (2:21.1.16-1.3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680) * sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680) * xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680) * xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680) * glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680) * saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680) * dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680) * dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680) * dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264) (Closes: #1138680) Checksums-Sha1: 65c3a9058b75e96e4dd407bd5166b408224e74e3 2720240 xnest-dbgsym_21.1.16-1.3+deb13u3_armhf.deb 32a2a1d4a6537d859a5d2d95ec2532439198f227 2936952 xnest_21.1.16-1.3+deb13u3_armhf.deb 08e157445620c9f90a74d6c35948273eab0b23df 14763 xorg-server_21.1.16-1.3+deb13u3_armhf-buildd.buildinfo c169330e2f033ea3f4e3aa9614cba8f873c2a9c1 3975796 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_armhf.deb c3dff2cdeaba8f225666663c1ed8839b6149498b 3163136 xserver-xephyr_21.1.16-1.3+deb13u3_armhf.deb 5f8d12076f67dcfb6359c7a1f60612a45de5d68b 5790416 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_armhf.deb 8a3aacea90993aecc2ebc93b0f1cb314f15473b8 819412 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_armhf.udeb 22a7c977ebafa2fe3470a0a3ffbf262dc2153066 3518088 xserver-xorg-core_21.1.16-1.3+deb13u3_armhf.deb 643a2061a1956982154886e97fba3b9c0999d517 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_armhf.deb 4575d40a34d6838f7ee267d89ec784e1d6827b80 9668 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_armhf.deb 8daf2b543c1ed848f8f543d815c0ef11de83535a 2415376 xserver-xorg-legacy_21.1.16-1.3+deb13u3_armhf.deb 24281222532cf3ba92998de01f94de5323e2a454 3300712 xvfb-dbgsym_21.1.16-1.3+deb13u3_armhf.deb af2801421379949df5b7ab23a8e5f3467e430574 3047212 xvfb_21.1.16-1.3+deb13u3_armhf.deb Checksums-Sha256: 5d67a4fd4a0ac09483325d8ea34ab46e7860e42815394ae1d9046854a09f23ed 2720240 xnest-dbgsym_21.1.16-1.3+deb13u3_armhf.deb 51b8d20a6ddf4e178bc057d12a87a20097ffbd46273568a5432f30cb77cdf2f6 2936952 xnest_21.1.16-1.3+deb13u3_armhf.deb c1499b1107762facb8b1110c23334d5dbcda63428d8448fe8058fab404a15aeb 14763 xorg-server_21.1.16-1.3+deb13u3_armhf-buildd.buildinfo 7e6d99cb0868221dde46c2999b4efc2f892a5330eb40b5aa69ae3ede86140617 3975796 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_armhf.deb ca09fda33d1f1ec4089a60c025c25f63eb4021b34b63a40cd6d7f32ddc73cdc5 3163136 xserver-xephyr_21.1.16-1.3+deb13u3_armhf.deb 5897be515fac6992d446c2bd6e306a0f131b3524d98fb5e6b2734816f13020fc 5790416 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_armhf.deb e129e0ea4e44e3602fc28aa9aaf564afc946c1291211ce1c9a3c8dffcb409f58 819412 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_armhf.udeb 83c2ef64987243b137cd98706cb1aade92a9f4fe97f2d7fcf392606b0b97b378 3518088 xserver-xorg-core_21.1.16-1.3+deb13u3_armhf.deb fb4cb0a1c0d25b6b3e87d17665850f60609f409ed785ee52f8fb284a18a9239f 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_armhf.deb 6f7fab2adb76c32a190e6a3b811d6e4aaa0da44f96de19a53c4a46b18f67e066 9668 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_armhf.deb dce3bf7949db4a65fea10b56a0f90c4606fb02fd86d380189df5071d47cf1775 2415376 xserver-xorg-legacy_21.1.16-1.3+deb13u3_armhf.deb f334888e32bd4f18e9fd88f7bd4b08b0ead4389e775f3412469c46a4367d4099 3300712 xvfb-dbgsym_21.1.16-1.3+deb13u3_armhf.deb 6209010f7d5407378d29c29aed34e0e984ded877816f56505d420cd8e816024b 3047212 xvfb_21.1.16-1.3+deb13u3_armhf.deb Files: 8adbb3f947c6a58bb8d3799769564d94 2720240 debug optional xnest-dbgsym_21.1.16-1.3+deb13u3_armhf.deb ad4ae4bb3abff9050b9576995e545401 2936952 x11 optional xnest_21.1.16-1.3+deb13u3_armhf.deb d5ab800c64f927e9859455570b1bb737 14763 x11 optional xorg-server_21.1.16-1.3+deb13u3_armhf-buildd.buildinfo da1ea875498ed183501300f0e7f1d263 3975796 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_armhf.deb 38d030a1017b455fcd9f5721c6afbb19 3163136 x11 optional xserver-xephyr_21.1.16-1.3+deb13u3_armhf.deb d6799d14ed2838caeaeedd93beb77051 5790416 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_armhf.deb d7e4adf9ebf38af2c9b78dae5668e5e4 819412 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_armhf.udeb 01d4564f066dd7d18a00cbdc63905a1a 3518088 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u3_armhf.deb d125c5db6e29716baa845af159331717 2581580 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u3_armhf.deb e8c3f61efd436b28add2c47f5543a2fd 9668 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_armhf.deb dd2817e9a38e0164b7fa5c17c45440b8 2415376 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u3_armhf.deb ae48c33be0716e773806191312c94f8e 3300712 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u3_armhf.deb 6b32d9a5c23f4b473724eb78afcf76cf 3047212 x11 optional xvfb_21.1.16-1.3+deb13u3_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmo8LlIACgkQvzDqKQSG l8V6BA//YdYOdVZFm3aY7ULcSeOM2menv1JrpYgty4RliSGTz5PMy4V1inebbUYi gXbqpSc2xsRrOUsCjbCNuVkocxcbgTYwiMw8/Du+IG/OJ/2wRYZ7/dk8lVuI+Kw5 +kNHez5Rb1MFlaxhrG4X5bUrYisBCJ7LbLFJfZJVsSfekXBV5wAHQNgcIMKwa21D pU+Z/FgF3SINSdz6FYjdwjfSDEqCJUe17Aci7dm2ijerdi2Po6UCVSpXhOapWr6P txdF50e8vx0AsuJLxka8uGNmA10Sb+tcrGkD4mIYb0XNb8wpmeUD6XW7k7DzgM/h sju7x/S6Xn1KEz1m8Dv4WC6xbGea7EyeIZNqB+OpzaQONkg/FvHbU9T/FtSb4MKW /43JYNIiMrDUrox6GcCefI0or0SV339RQLyCfOBH9Xm+fZyWd8wjgbnKUHtaUJJj bU2swKoNxH16gEXr0Fab08mLFB9sGZAERQWRKIcmyWiwum0e9hn5pKKlkd0DkSsl vysxvTEyDlsT/kBMA3AdKasCvUvlxpJMwcEPhuVbIhb5p+ffPFlJu4gq6IB+5L78 gPBIjf86GB8ZkciTqFu2iqb7AGdPG6laPA+YasD0qbwUUJDyV6BYaQdM5fJeSM8q Xsodh22EOiM3vIVVJ0AcSpGOgvp5gTeuxM7FHSFTxbSIm0jVC0k= =FmVo -----END PGP SIGNATURE-----