-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Apr 2026 02:48:00 +0200
Source: xorg-server
Binary: xorg-server-source xserver-common
Architecture: all
Version: 2:21.1.7-3+deb12u12
Distribution: bookworm
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 xorg-server-source - Xorg X server - source files
 xserver-common - common files used by various X servers
Changes:
 xorg-server (2:21.1.7-3+deb12u12) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999)
   * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000)
   * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001)
   * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002)
   * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003)
   * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003)
Checksums-Sha1:
 927fca1c11d9784dd83b2a6e9c6ad7df23b6531b 7398168 xorg-server-source_21.1.7-3+deb12u12_all.deb
 8065ed32b6bf4d62c664e543662c84d628c722f8 11753 xorg-server_21.1.7-3+deb12u12_all-buildd.buildinfo
 e1b2ca1ce15757de84908ae421ad4bd3913102b5 2383536 xserver-common_21.1.7-3+deb12u12_all.deb
Checksums-Sha256:
 fba3364a9446f2b08933df0de696db5f3166a54a74595f8d1f2662708c15b42a 7398168 xorg-server-source_21.1.7-3+deb12u12_all.deb
 f86dca7c570c728fbb440424946540d252b9d9a2a5731fa8d3f69fbe56cfc1ad 11753 xorg-server_21.1.7-3+deb12u12_all-buildd.buildinfo
 e233f6e7da5bca45d3bd9757009b3327614fd9098d80bef55aed7c9db2327342 2383536 xserver-common_21.1.7-3+deb12u12_all.deb
Files:
 2ee9444bdc33ac2e4b64e7736d3773d5 7398168 x11 optional xorg-server-source_21.1.7-3+deb12u12_all.deb
 1d327b4cea41eb3a575e45c113d5abd0 11753 x11 optional xorg-server_21.1.7-3+deb12u12_all-buildd.buildinfo
 91eef85713b1d5d608d8dbedb6bb8278 2383536 x11 optional xserver-common_21.1.7-3+deb12u12_all.deb

-----BEGIN PGP SIGNATURE-----
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=+pQi
-----END PGP SIGNATURE-----