-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 07:52:43 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: arm64 Version: 2:21.1.16-1.3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: arm64 Build Daemon (arm-conova-04) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1141703 Changes: xorg-server (2:21.1.16-1.3+deb13u4) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * GLX: Free the tag of the old context later * glx: free old context tag before allocating new one in CommonMakeCurrent (CVE-2026-56000) (Closes: #1141703) * fb/mi/glamor: reject glyphs with negative dimensions * glamor: reject fonts with per-glyph metrics exceeding maxbounds (CVE-2026-55999) (Closes: #1141703) Checksums-Sha1: f97a6aef286d400888cfa2551bfd8a7a05313325 2695288 xnest-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 1b7430350f286be12aba366d18fb9dba0acfefee 2997960 xnest_21.1.16-1.3+deb13u4_arm64.deb 21eb1ed767d5fef645f0056c4dd2e85316afdf28 15128 xorg-server_21.1.16-1.3+deb13u4_arm64-buildd.buildinfo a0b2e2424c42cb22a00b4a591ad01ff95cd21335 3945016 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 7d42218ba6cc0da04b47c2fd1bd1037bb4fcaf35 3246572 xserver-xephyr_21.1.16-1.3+deb13u4_arm64.deb a721d059322b34c10f6647bba812dae37f1bda16 5793852 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 3cbb5bf2c66c4a5d7b6d3594ee84f98b6032457d 900768 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_arm64.udeb 2ff85509540a89c43006405ef4e5af2fa5207164 3639920 xserver-xorg-core_21.1.16-1.3+deb13u4_arm64.deb 17287c674f43e688b99427f0762cd03f353db8e1 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_arm64.deb 84a54c87f918eb1b49250172930f1c201c0735b3 9800 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 48f57bd200d91277428d72b48b481eda9927bccc 2415652 xserver-xorg-legacy_21.1.16-1.3+deb13u4_arm64.deb 888b5ef3c40995966b2631ef3172b6a1760671d9 3276192 xvfb-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 1e32c77e1d67fd0bee878f57df97bf376dbf5fef 3123132 xvfb_21.1.16-1.3+deb13u4_arm64.deb Checksums-Sha256: d796c059b40f010343a2928fbd682cfc4c1b2d7ddc70a4251579611d0e2297f4 2695288 xnest-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 29635d6f4fada861d6677b539d3d5d775cf9780d20a22f83a643976473f046c7 2997960 xnest_21.1.16-1.3+deb13u4_arm64.deb 8018087e0a3b7ae2519d71c681dad54682edb0ff682593d6c30d5c7f8f6a9dc7 15128 xorg-server_21.1.16-1.3+deb13u4_arm64-buildd.buildinfo 6a4822aede1638aca4c9ab369c7080d5cf6d7e83297851191a7413cd4ae721d3 3945016 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_arm64.deb dfe13103dac2985202ee5650bd634db6ec9d2d6e3276d999b6cd4c8dc8c0e02a 3246572 xserver-xephyr_21.1.16-1.3+deb13u4_arm64.deb 40050bad7067a134c5e40a679b38a7062d0621613c79233e1c29492a0aa037c4 5793852 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 56ef0ca0accfd50e64ce9ee4588338f61712f39a1dd8ee9a9cf2c7e5175271d8 900768 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_arm64.udeb c59d1405f322ee7b352b7ee58638e0c88655014b48836237fdd242681d43396d 3639920 xserver-xorg-core_21.1.16-1.3+deb13u4_arm64.deb a6d7f6a9d386129037880231250cb29d6a0e411c5d959288293b92b3fec94e80 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_arm64.deb af7d640192d7206940dee0f1280b7662ae53cacb0fd385db654add6a40d39173 9800 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 75e8127cce33a1946e7d79c4fecffa0e6fb3425c7f87f5c266efed0b16b9b50a 2415652 xserver-xorg-legacy_21.1.16-1.3+deb13u4_arm64.deb e4cf99ff110ecbab22b039d4d00cc9e54cf7000c7d589b45e01629b3c1051626 3276192 xvfb-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 2d1cfb5cd9ab9c453a3cdb8193e737deb1d89165213c5b94671f26bb7afa839b 3123132 xvfb_21.1.16-1.3+deb13u4_arm64.deb Files: fa76f3e80fd26fa36a403788e791ada7 2695288 debug optional xnest-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 527bc688899122e1987dd095184d5fc5 2997960 x11 optional xnest_21.1.16-1.3+deb13u4_arm64.deb 400ac1f3015534bc965bc2f09ce58965 15128 x11 optional xorg-server_21.1.16-1.3+deb13u4_arm64-buildd.buildinfo c8638b134c2002c16a0ac5932385e008 3945016 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 9941b474d1b0937e05418f8ad1cb9fb0 3246572 x11 optional xserver-xephyr_21.1.16-1.3+deb13u4_arm64.deb c92be048e047dc1c21a49efde124fc21 5793852 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_arm64.deb 368abf6b0287e2b6ac5e4c16b540c9ce 900768 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_arm64.udeb d1e9b4ea7bc8738cc5313f048fa66ba6 3639920 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u4_arm64.deb d63adc2e3fe6316c684a670cfea4236b 2581764 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u4_arm64.deb b062269da581840ff1b7766465920686 9800 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_arm64.deb a2a4777d78ee98e40429859d046046a0 2415652 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u4_arm64.deb 86c9137423255847ac9a07d164cb326d 3276192 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u4_arm64.deb ed16473206194ea5a84518113bbb385b 3123132 x11 optional xvfb_21.1.16-1.3+deb13u4_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgSZRd/+N1Ed3hy+mPMAxAOQQpzsFAmqfDMsACgkQPMAxAOQQ pzsOSxAAnIe9uxPfi7xijiTIIFkw1JTyZSgE5iC/LkaZS50MPIFVW0SpU9tW+lVn ftAfZVNYrQLuF1ITBbSlQxFugLiyb7JP/XKnDBffw9N2ioEuWDEk9CcHQLDXeT2k ehSPoKqruILyxUkUAxtUySvNMaPNy2XAU0hIt/Yr07Z+VksMRaSqvLonSKlWY/F8 vjB+Zl/hJ2wsvVShNNPHnapCKUCOz8b933wth0dTIa3g0EpPvKM8O7et/A57ir+B H8LpsQ1qzYgrFffMZRccI7MT5rbnnM5V9EfXK0jcQxcmkkvbKy6DUCpChVls1yKR dA7uWDHq/Et033jf5U870uTrJY2M0n0bBm+IDL73pc0XA0/Fu0bKeL/8cEOF6kPl 7ztfcq47+8OUt0z/Y0JzL0ohOSPffZLauyIzH4wUZ6AJG7ovUKkuFIbtkpiO4RRF Hj18B2StzJPD5GysZHdheqysPUjLyt2KwGLEchQRq9CBg0wLx73p800oP/8eqmtP BFkiY/phR1+TH4/ksrCox3acW19dKBMgOj/K7z7mKYcpw81w0h898N5td5STHZk0 YrSnRCr6kcIW18XLtOxdt3k05X1BNv7GiGexygdigSv+6gs/o7EU/Xr0JjU7lA7/ Q1q8hTvgiwha07NceFLVXCHW4aA2bLlP1e9Ye/idKjWi38bMP4M= =gFm5 -----END PGP SIGNATURE-----