-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 05 Sep 2026 07:52:43 +0200
Source: xorg-server
Binary: xorg-server-source xserver-common
Architecture: all
Version: 2:21.1.16-1.3+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 xorg-server-source - Xorg X server - source files
 xserver-common - common files used by various X servers
Closes: 1141703
Changes:
 xorg-server (2:21.1.16-1.3+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * GLX: Free the tag of the old context later
   * glx: free old context tag before allocating new one in CommonMakeCurrent
     (CVE-2026-56000) (Closes: #1141703)
   * fb/mi/glamor: reject glyphs with negative dimensions
   * glamor: reject fonts with per-glyph metrics exceeding maxbounds
     (CVE-2026-55999) (Closes: #1141703)
Checksums-Sha1:
 7a469bb3bbcac0b79eedf07d6f284413d2126d33 7518460 xorg-server-source_21.1.16-1.3+deb13u4_all.deb
 3adcb407223f851563c1e896e9e786b4a44e82da 11837 xorg-server_21.1.16-1.3+deb13u4_all-buildd.buildinfo
 2251ec89127704638db77a992ccf54b446d574bf 2410256 xserver-common_21.1.16-1.3+deb13u4_all.deb
Checksums-Sha256:
 2ad905e38604b7b894366e02b790b83755a6133c45f5448a9c8b6991d49e0f3e 7518460 xorg-server-source_21.1.16-1.3+deb13u4_all.deb
 30014a90212f043473d5b87dc6a4e85259b9717f574f6fd76b9a16f6e9d72bbb 11837 xorg-server_21.1.16-1.3+deb13u4_all-buildd.buildinfo
 94bc0dcceeefabd4f706af19b3424de7f827758d0ebad5c18c52e73365d7f3ab 2410256 xserver-common_21.1.16-1.3+deb13u4_all.deb
Files:
 77f6ed7a58be5d21282e107278e96225 7518460 x11 optional xorg-server-source_21.1.16-1.3+deb13u4_all.deb
 3a34b964235646b1533810b4b6611ad5 11837 x11 optional xorg-server_21.1.16-1.3+deb13u4_all-buildd.buildinfo
 b3764dc11f05bb643446f425fbe80522 2410256 x11 optional xserver-common_21.1.16-1.3+deb13u4_all.deb

-----BEGIN PGP SIGNATURE-----
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=a4+T
-----END PGP SIGNATURE-----