-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:48:00 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: amd64 Version: 2:21.1.7-3+deb12u12 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.7-3+deb12u12) bookworm; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: 32306ccb1322e8694e9e568c9de6c6f5fd9e04ae 2684540 xnest-dbgsym_21.1.7-3+deb12u12_amd64.deb 48524339e22688763fb58b6cf2235b4660645123 3014584 xnest_21.1.7-3+deb12u12_amd64.deb 076f92d8fa06cf0de9f3e5b8016752ae00b3fa32 14934 xorg-server_21.1.7-3+deb12u12_amd64-buildd.buildinfo fc18684abc7dee74ef12aec6ec12650cd243f88b 3960524 xserver-xephyr-dbgsym_21.1.7-3+deb12u12_amd64.deb 4a8ae48bf2a3e7c65b3a4c15784d2b5fb676863e 3294164 xserver-xephyr_21.1.7-3+deb12u12_amd64.deb ea34e7752b0361b6b3be635ababfe80973d4c66a 5807908 xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_amd64.deb c8fc3fa6787847b0f656b5de26f8a0cc561394a0 974048 xserver-xorg-core-udeb_21.1.7-3+deb12u12_amd64.udeb 5069633c7bbbc264e4d85957cee8ae4a0048eb15 3721136 xserver-xorg-core_21.1.7-3+deb12u12_amd64.deb f51ed566f684f06c6a26d2ad6466b59dc19bdb50 2554984 xserver-xorg-dev_21.1.7-3+deb12u12_amd64.deb f0141c9f4224ff11d37ca2db979312758d8c95da 8892 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_amd64.deb 403069e255dbb90146a16576df9a1df69f104b36 2389020 xserver-xorg-legacy_21.1.7-3+deb12u12_amd64.deb 8ce154328f80586ba3621be4d40cac4ee0644e29 3273348 xvfb-dbgsym_21.1.7-3+deb12u12_amd64.deb 48faaadf463de9630749040a0a7443dd4a095ec7 3153788 xvfb_21.1.7-3+deb12u12_amd64.deb Checksums-Sha256: 26954e793240b63913d301df523b0441e5d17f94e38fc6ead64e85d60339dd11 2684540 xnest-dbgsym_21.1.7-3+deb12u12_amd64.deb 826c1db3a4dfe8234fdbeb9855b5c9fcc679fe6e59ccb18b3915718dbc635a55 3014584 xnest_21.1.7-3+deb12u12_amd64.deb 8f46354bcf986bc220d2c64b875daee2be08426a13aebd827e6a0dd8195016c9 14934 xorg-server_21.1.7-3+deb12u12_amd64-buildd.buildinfo b385dafb8a5d07f4facfa62f1b5daa526f96639b6013f42bb45c871376043213 3960524 xserver-xephyr-dbgsym_21.1.7-3+deb12u12_amd64.deb b80cde0303135ba23af434b525a29b6a894c18dfa8c3631eb26eb9ff88eb776b 3294164 xserver-xephyr_21.1.7-3+deb12u12_amd64.deb 4d78de2025045b41d62cf3cb76539060675cbea27cbcea04960f86b9b68d76cb 5807908 xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_amd64.deb 6b21c4d8467167039f9f48768f06509567ae5a5683df5b53f06bc05f7f550ee2 974048 xserver-xorg-core-udeb_21.1.7-3+deb12u12_amd64.udeb 2949addeef8cb93d4e2ea1b1fd028c67d2986fae6e70c9f251e79b6396b23fb0 3721136 xserver-xorg-core_21.1.7-3+deb12u12_amd64.deb 81311ef3fb042c6244cda895c3d60588f4f1538e6e78a344f546387c6602d8f2 2554984 xserver-xorg-dev_21.1.7-3+deb12u12_amd64.deb 1ecdf57f18cb6d7381603afe5e2c2ebbb0a473b4421a4b546f86139304e37ae7 8892 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_amd64.deb 8571473ffda635aa4c86079f0636929f780a991fd6646473c23df9f2032aef51 2389020 xserver-xorg-legacy_21.1.7-3+deb12u12_amd64.deb d139b21e2b93871772d1be56fa240720b3bd287202a5ca82456d2220b0885f76 3273348 xvfb-dbgsym_21.1.7-3+deb12u12_amd64.deb 7f98f5ddc39593249330fa2612949b6298618b945becb2d9d7b598e7ca789ea0 3153788 xvfb_21.1.7-3+deb12u12_amd64.deb Files: 6017ee1444bed94b418e72a0f4422df5 2684540 debug optional xnest-dbgsym_21.1.7-3+deb12u12_amd64.deb a504eddcb530f081722133cdffb4d283 3014584 x11 optional xnest_21.1.7-3+deb12u12_amd64.deb aec6fd173c249d48ef569eaa8e46f7c3 14934 x11 optional xorg-server_21.1.7-3+deb12u12_amd64-buildd.buildinfo 658b2c977ee84b561822a68bdf220e4c 3960524 debug optional xserver-xephyr-dbgsym_21.1.7-3+deb12u12_amd64.deb d4fc9941bb91ed6c6fa6ee089707cb5c 3294164 x11 optional xserver-xephyr_21.1.7-3+deb12u12_amd64.deb 942388af3024654a37cdd23d337c98f0 5807908 debug optional xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_amd64.deb d321b733731aa2f0302ffecb3fe020bd 974048 debian-installer optional xserver-xorg-core-udeb_21.1.7-3+deb12u12_amd64.udeb c254a287ddf6f8bed6397e388b849f60 3721136 x11 optional xserver-xorg-core_21.1.7-3+deb12u12_amd64.deb c268cad8ad4b62ea17a2de602c620182 2554984 x11 optional xserver-xorg-dev_21.1.7-3+deb12u12_amd64.deb c37e439bf3c29a5347c96810bb08c8d4 8892 debug optional xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_amd64.deb 1fb5f6bbdb33d518514ca0b639095a98 2389020 x11 optional xserver-xorg-legacy_21.1.7-3+deb12u12_amd64.deb a8390177307de1bd1d663d0b5732cd0d 3273348 debug optional xvfb-dbgsym_21.1.7-3+deb12u12_amd64.deb acc7bb9351e4f8ea6691341356865a20 3153788 x11 optional xvfb_21.1.7-3+deb12u12_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmn2eYoACgkQPkCWRKsh 20eguw/+Jlbm7Vn6hrVyKc4jjBD3GN2B4zrhuzLk/Lm8JCId4+rmSBX9JSkXFzFs OjOFwCzdvUboXt7q8RKYq8xYak0Iee0+6x6CRWWGl3diopa4pEg3/h2zfh7hpwfk D3SQS6sV1VNOC2KG2gWpZpunjt65DQ9zmOrHrjgdo+nrVbnjgLuA4j+vyAfwmw5a vw8JGN50WqZDX5pAAHj8JsPK09xRKx8CcYDGaYgQpeaDGG5TOue8YRFQZ90IgM5a oKWEOCubV8r+eVq8bKFoKCoP3vWVr7v3/YqzRuWtrrtcgXA7yyVvu0hrD1umVsKO /4S/QsWF8Pq2MAgZh0h7RqfRTOtTz08zEYLOfCo4gaInAqccPzgIldeEWKDMDKlH jYpBkyjsF8LmIqggvABHLDQi45sgvYoXfP5AhssAc1HHpkPRJ3WdK06fE+/gx4Jx A2ehkEDjYm7C0gZlv1K122pyGDrTzG+Dded8DPR4iZXowPr209TvgXIiTGZ4z/Ys rrrRD8GGkE493YfMRILlFtf9SbxaqSt/qa84mU/erITPY9CxSYMcAH8W9JzT6VsC Fw8Fs7PWUpoVUPR8ndRHXJwNeviz2YHQ9YMG6T0zPMZ5E3oG00lhyV3C1WT6pAEC 1xiD9z0vo8aRJjq9qwps+6q18n117nN2BJk9cMrVtaEVmqgBYb0= =bNPf -----END PGP SIGNATURE-----