-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 07:52:43 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: armhf Version: 2:21.1.16-1.3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1141703 Changes: xorg-server (2:21.1.16-1.3+deb13u4) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * GLX: Free the tag of the old context later * glx: free old context tag before allocating new one in CommonMakeCurrent (CVE-2026-56000) (Closes: #1141703) * fb/mi/glamor: reject glyphs with negative dimensions * glamor: reject fonts with per-glyph metrics exceeding maxbounds (CVE-2026-55999) (Closes: #1141703) Checksums-Sha1: 438d71ccc3df90aac6a224ac364fe692bf52ff49 2720280 xnest-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 38892132434e3680656e258a053950fa2e04b0d3 2937156 xnest_21.1.16-1.3+deb13u4_armhf.deb 2846f50044943a58096ad5b03e2950bdf8f4a6a3 14979 xorg-server_21.1.16-1.3+deb13u4_armhf-buildd.buildinfo 33d8d8f252f8ef3f364db12916f53805094dfa7d 3975852 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 1d85a3a68fa31d8af5837c84cbf5376c4348ea78 3163292 xserver-xephyr_21.1.16-1.3+deb13u4_armhf.deb cdfac6df922104468bc4749a4750b55b477eb606 5791896 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 95f03dfbe5c9dca0c1d28d9e78088f8c218b0593 820024 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_armhf.udeb 70a0b96cc5b9ec976e040fd9909ea824c45b4e9b 3518244 xserver-xorg-core_21.1.16-1.3+deb13u4_armhf.deb 06bd316663ba660e0ef865e67f65acdd5d53a716 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_armhf.deb a6e1217d82f0b767ce58b26159f914889e486fab 9668 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 086b6752e4368e0c3c9f23d62541de40e8aa95bf 2415540 xserver-xorg-legacy_21.1.16-1.3+deb13u4_armhf.deb 59cf4d8b0b7249efe36dcc864e8b637d04ff917f 3300944 xvfb-dbgsym_21.1.16-1.3+deb13u4_armhf.deb ef86fea6439b1110161adf2f28cd482eaf656acf 3047256 xvfb_21.1.16-1.3+deb13u4_armhf.deb Checksums-Sha256: 8c94235bb23c30cf157a0d464298337fef9f5bbb61df0e749c4c5e9fcf32253c 2720280 xnest-dbgsym_21.1.16-1.3+deb13u4_armhf.deb fa46aa6ae9fac0f646b6ea485266b3444cee2d065a38adda3f4984c870c8c20b 2937156 xnest_21.1.16-1.3+deb13u4_armhf.deb c4d542ee91dde0a7717499efdf1219c1fa601fc7880147a8fbd73cf33ea1265a 14979 xorg-server_21.1.16-1.3+deb13u4_armhf-buildd.buildinfo 100db1af3989edd9024cdd86a155a98eaf4afac230eca2b66510277e957ddaaa 3975852 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 88faef57728211fff47bd79f1942756dd5b66eefd169f1eb1c8995b43ecc3361 3163292 xserver-xephyr_21.1.16-1.3+deb13u4_armhf.deb c0ddf8c63cbcf64401cba80b420331c585c9577309df46dccee1b7353a9fc969 5791896 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_armhf.deb c3ddbcc3ce09c952a4f6f93ccb545bfc35d9385d07a2c25983e5483e22dd4c91 820024 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_armhf.udeb b9e846654a82a46f0f550a44962de7857f462beafdb2cd66f7c1063369e7e5ab 3518244 xserver-xorg-core_21.1.16-1.3+deb13u4_armhf.deb 529cac12fcd66b1ee613ab3f3af7bca4681d3dbdb681e8f8a94d6ab471898825 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_armhf.deb 0da9266dbc3fa8b12581748ae0f2ccb71ee66130105b8315dd60cef50e88a03c 9668 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_armhf.deb fbbd087683b474be78c72fd6c45874d3e73a676f679b6553284dc8bc6f012170 2415540 xserver-xorg-legacy_21.1.16-1.3+deb13u4_armhf.deb 6e0814d8133f0cc6c4498862583f3cc575707fbe80b6e1647cca9a26c8501311 3300944 xvfb-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 3bc65bf4762a746883b88fbb7ee94a8fac14670978f8cb259308b15723a39b1c 3047256 xvfb_21.1.16-1.3+deb13u4_armhf.deb Files: 578ee04701d9c8e8d5bbf3287e3ca9d0 2720280 debug optional xnest-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 6adbe9f0455f4b23ad1f73ab2d7fd95b 2937156 x11 optional xnest_21.1.16-1.3+deb13u4_armhf.deb b1b04590f0dbba7248c42232fef34610 14979 x11 optional xorg-server_21.1.16-1.3+deb13u4_armhf-buildd.buildinfo 9437cfdac4b454cd301591ebf2d99919 3975852 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 5202051b463e39f64e52e4073236e1d4 3163292 x11 optional xserver-xephyr_21.1.16-1.3+deb13u4_armhf.deb 91966e743e90d63e85ff1937bccd337b 5791896 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_armhf.deb adb528571ee0415f8e187e58ddf8a694 820024 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_armhf.udeb d0927ed39559acb1c619c928742c988b 3518244 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u4_armhf.deb 5c1e2faec0102fa507bf46cebb37f5a3 2581764 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u4_armhf.deb a61c8eca40e99dd9b5df4f2cc017f1ad 9668 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_armhf.deb ce58ee89e721a8dbdb6c2b076453635e 2415540 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u4_armhf.deb 3466870e834908e3d4be8e25375a0b7d 3300944 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u4_armhf.deb 7d2e619f3515475c99bf3be0f53a54c3 3047256 x11 optional xvfb_21.1.16-1.3+deb13u4_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmqfDLwACgkQ8U6eOZMp j69ZvA/7BYSjaWjcmQ4IWGns8KJIHoRy6jvzxlX3tIlzQf71f9sCcQJuGpmtHTZj Ujz+Gza2fWNR6mXXycmS4+w7+9qiFtW6xNDNw4Zztt62HhuWgnPdXlU6rV1/aZWF dWnsa2iS3+6M0CAgR0cVjoFm6p4YKPYGb6EudZuKF7NJYPoZhfDs3Zm3p4ATcsaR EdgOC9FBFXsEdl2Ijqs9iMrjZxl/zCAQakKtoTnP4sQPP24vkGXUe4sintcFI2wS ouonCi3tIxjxYB5QHMi6h1MAVznvpIV79JIggsBTjklazq0hjlZ/XGR92Rs7XMtK Z94sYc6SXiz+XPkH8EVLRZD0gGDMoFbLh/f6OQN1mleQydnekXyulAmzSr1LTGC1 ZV4y7T6M0u/uPt6yGLhmjftxufnRrpO19fd32OYqki4yrhZaAQS00VdQ/YFddXmN yHU9ltl4I/q0CYob+qBWmoX9cvGq/6Dd2tLKtGaGlERHD39Q53oAsGynBlCBcKyZ aZhYsYJ+wUw3OuFgUQ0SS7BfPpJvmyPXalNyYFAKd+SMt92OOaZQozt6bkb4UAWf 6m+X+8NatlBkvmz/ke75VfTz1qOhLmuUW2qek1rNC78yh5oqHVcXVreZ2618PMLJ pUa1X1m+/ghEFxiBWIV7qLHvijjjOhLYZy8hSgH/qtGNCHB8hIQ= =PzuP -----END PGP SIGNATURE-----