-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 07:52:43 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: i386 Version: 2:21.1.16-1.3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1141703 Changes: xorg-server (2:21.1.16-1.3+deb13u4) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * GLX: Free the tag of the old context later * glx: free old context tag before allocating new one in CommonMakeCurrent (CVE-2026-56000) (Closes: #1141703) * fb/mi/glamor: reject glyphs with negative dimensions * glamor: reject fonts with per-glyph metrics exceeding maxbounds (CVE-2026-55999) (Closes: #1141703) Checksums-Sha1: 133734978f69243ad3d3e602eeb921824bfcffa8 2528504 xnest-dbgsym_21.1.16-1.3+deb13u4_i386.deb fe5350119ecdef329e422dffb2100b89b1dbed05 3099676 xnest_21.1.16-1.3+deb13u4_i386.deb e7144218b7ead8505c61da55f53536c80f8e4501 14952 xorg-server_21.1.16-1.3+deb13u4_i386-buildd.buildinfo 4e8a0a1add8fda613941dbac14c21848bd79c0b2 3695560 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_i386.deb 7d7efcb06cb8176aba499fc0bd7f3f00faf5a58a 3398384 xserver-xephyr_21.1.16-1.3+deb13u4_i386.deb 6e2ade91cb4b8d148f12dc32113503055fa18f1f 5451248 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_i386.deb 45d0111fb8340e6ad4e493f7475a3d8ff1426e68 1035572 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_i386.udeb fd121519bde90cfe0312be1e00cee07d63ddfdbb 3841016 xserver-xorg-core_21.1.16-1.3+deb13u4_i386.deb a69f26c3258735aa58a4c23f242ce1fd896259a5 2581756 xserver-xorg-dev_21.1.16-1.3+deb13u4_i386.deb 2791c8ca7cd34757aca0b2daf734499a70388ee8 8712 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_i386.deb 691684304113a528463b04f592209e9d573fe220 2415672 xserver-xorg-legacy_21.1.16-1.3+deb13u4_i386.deb 6ba21ec92f28f38cc6a75322fd45bd312a818a48 3068452 xvfb-dbgsym_21.1.16-1.3+deb13u4_i386.deb 4b68c76fc9b8f29627386bcff756c0631f214456 3247756 xvfb_21.1.16-1.3+deb13u4_i386.deb Checksums-Sha256: bc650b2e676ce33ab049f670c974b2c8e0416f80ec2185922e56999583a493ee 2528504 xnest-dbgsym_21.1.16-1.3+deb13u4_i386.deb 68490907afa93afa52cb5a6dea8bebff15a483946884f33464eb8cdfaee0dfbb 3099676 xnest_21.1.16-1.3+deb13u4_i386.deb 39595876a52e2f5a4420ad403852479b51a030e9b01c18b876ce654751960824 14952 xorg-server_21.1.16-1.3+deb13u4_i386-buildd.buildinfo a54dac12b3d0c7b05c3b48e7a28469d9eeed847f9fa897c8523c7b4af91d1f7e 3695560 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_i386.deb 16da9f18a6a2f89e725843436dd723fb44937c86399e6b05b6b7f7995cf4ca74 3398384 xserver-xephyr_21.1.16-1.3+deb13u4_i386.deb b3cb7d81fe3602716fd2a97d46e05f4705e597598310c6cd20f7a2d1e3722621 5451248 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_i386.deb 70766483f1aebb97b6f1494454d10fe00906dfd7340a03b17ac85b9729c724a0 1035572 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_i386.udeb 7a4eb700067a1a40085baac41e45788990adcf6bbb05d1a1cfbaed01f8091be2 3841016 xserver-xorg-core_21.1.16-1.3+deb13u4_i386.deb 154bfdf234920123cb88fe726a329e33d9145850bdbab9ac5355c1027ffeb546 2581756 xserver-xorg-dev_21.1.16-1.3+deb13u4_i386.deb f111ed1772732a507287300d0acd617ef33eb02d11c0a8e5b7b6d0bf55b22e84 8712 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_i386.deb 2f2068ff801f6b335352917e179fe48ac27ee70adc5712df253c7d7f0d33e4db 2415672 xserver-xorg-legacy_21.1.16-1.3+deb13u4_i386.deb 8d4b7cf296533d14b2885c0b7b87051f272c67391f25f85dfe655748c0c576bf 3068452 xvfb-dbgsym_21.1.16-1.3+deb13u4_i386.deb cb1508bba89def24b247ca70a0627999c9087a84a776aa38e5f9529d01fd73e7 3247756 xvfb_21.1.16-1.3+deb13u4_i386.deb Files: a9038e869013410a01a4667875bf8aca 2528504 debug optional xnest-dbgsym_21.1.16-1.3+deb13u4_i386.deb c172c8dc573b4fd05a3ac644c8f625cc 3099676 x11 optional xnest_21.1.16-1.3+deb13u4_i386.deb b422cd38eb160f99e73343e1626d67d1 14952 x11 optional xorg-server_21.1.16-1.3+deb13u4_i386-buildd.buildinfo b8026b1218e2122dd667ba1f3566d7f1 3695560 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_i386.deb 6d492732a6ab2ef64b048de22e5afef9 3398384 x11 optional xserver-xephyr_21.1.16-1.3+deb13u4_i386.deb 3688f7b85a9a88151d6397a3e14233b6 5451248 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_i386.deb 79ef5cc3e8b39babcb8f6c96522838db 1035572 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_i386.udeb d599d6e128cc1404180924a10e8bf974 3841016 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u4_i386.deb 75ba8aa4f87d3d012991e4b6477dd11c 2581756 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u4_i386.deb bf1f8a86943a12dea9ae32ea65d9adb0 8712 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_i386.deb ab54e25ac18f3bb423ecfe38bfca059e 2415672 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u4_i386.deb ea9901c35312ba413d4d8c6e2a6037ee 3068452 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u4_i386.deb e97e95411f3c4b0ce3c98cc37c28f523 3247756 x11 optional xvfb_21.1.16-1.3+deb13u4_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmqfDO8ACgkQGNGWmfrq ILHNrA//UUTpzktqkTX5AESL1MpMpVG8Chv1gNNVXi8hU8bGOvK2oh6p6zS0X39P XWTtpQAVaWBdfWh+AH5cVXWKoULS3wSkK3tpAz89jercvTTiBBNPAsLdWG3kyl9W TRMqFz5EXIvzhsOLI+vez9hmAmYOH0opmeAuS55YwjN0rOmuw2F1Zp/64ZEjUfgl qa7Y9M+sj/l9wpMEv2LJ4YoF30WIqObwprzY5d2LUPC6TMrCz0eY7HJdWnshMK4R N8ZGfrXBGTUqYXNtikteiXhyoKX4a3hmzQSy7yRIjbl7qIFKr80LpuAwe107sQIA OvYJ44JoROI92tnZcPcXxsN4On0IjPES2gWt+fp5wIvqX1uZLCPj1SVrcuXWrbDC Kls+ACF0AlN+lhE4MDOXifOQkwBJbPDptGBqqRWeN9oj7fiHYSbguPmQRs737jMR BVphAGKDk04hQiE/liMYpFOhDSYMuk/8WrenZ2qMK0gRtJ/w+MYDpN22ZVrPTTIz O6ZfxkBOju02c/hpvUmSCY2YYeUI539YcaLjVf4vTVqelkNsEdodSyMgJGJ1WA2r 5ZRSHTlUigMgQ0RTkPDD/fIsCNH36yZYwxvCdZxdQDk8F/0TLB+MKUfaOdXfpd6W yokCLkseaR5ttXPzuRhHSj7s35S7HEDAjpDELaHvmDAwSsizMPo= =BKjQ -----END PGP SIGNATURE-----