-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:48:00 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: arm64 Version: 2:21.1.7-3+deb12u12 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.7-3+deb12u12) bookworm; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: a59519ccaf452de9312d1c47b1cfcb97800d6c40 2646736 xnest-dbgsym_21.1.7-3+deb12u12_arm64.deb 5c276ec5001d45ab83485502c652b12fcdc5712f 2963396 xnest_21.1.7-3+deb12u12_arm64.deb 27010007e8bee9e311dd038b3ea4cf5e6dacd671 15005 xorg-server_21.1.7-3+deb12u12_arm64-buildd.buildinfo ffdcbcecb6fccd756047825d9d622ecf109a92e8 3879364 xserver-xephyr-dbgsym_21.1.7-3+deb12u12_arm64.deb ca2025df08ebe3d38948571138ba69ec608cf48d 3206156 xserver-xephyr_21.1.7-3+deb12u12_arm64.deb 9226af8ae9e02213984e3ef519be4c95f8623ad2 5720456 xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_arm64.deb 34920830ef8eec6ee1913d1d4aa71088cdd6c8eb 883288 xserver-xorg-core-udeb_21.1.7-3+deb12u12_arm64.udeb 19542c849e31cbebd2359d9321050d6903d48be2 3591348 xserver-xorg-core_21.1.7-3+deb12u12_arm64.deb 1a55635806fc0c2eb85e0da60ec8f3c239560eba 2554988 xserver-xorg-dev_21.1.7-3+deb12u12_arm64.deb 2e9c62b99dfd7ab25255697c194af0c04f191653 9468 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_arm64.deb 91af33e6315bc50db6a818b51a360b90f1b57c6e 2388960 xserver-xorg-legacy_21.1.7-3+deb12u12_arm64.deb 451191f0b7ee56c3ab47a1600409f8b0d16c0690 3207660 xvfb-dbgsym_21.1.7-3+deb12u12_arm64.deb 2967b1bee3573a7e8bef20275a56eaa2c7b1c585 3084952 xvfb_21.1.7-3+deb12u12_arm64.deb Checksums-Sha256: 3c5672f9814e01debe5ea1e68cb789105740b6c5a33f8aa56e75d7099e0e45e2 2646736 xnest-dbgsym_21.1.7-3+deb12u12_arm64.deb 5d66311ba42e99f2cfe263745ade1181bb128c30603bda973dbea59f28d2baac 2963396 xnest_21.1.7-3+deb12u12_arm64.deb a6f32ddc5a953136d27c954551f7347a7d40fcc9ba22341fed419d9a1d8fe2ef 15005 xorg-server_21.1.7-3+deb12u12_arm64-buildd.buildinfo 9e2671798afe222be12610caa3423e7f14b677b7df3a6a014eb5b0c6efc092d8 3879364 xserver-xephyr-dbgsym_21.1.7-3+deb12u12_arm64.deb d9b7b197d465f6770fbe7f964ff7335b14d78570e1bbe362175af39497d9e2d6 3206156 xserver-xephyr_21.1.7-3+deb12u12_arm64.deb b73f13ede39ea5b07f7cf97af1057dc96f1a8fa1961bd367aa278444391cc380 5720456 xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_arm64.deb 3a112173e0bd3d0a7613ee9b01b18579c04a4f08b7eede6c6861679274e18376 883288 xserver-xorg-core-udeb_21.1.7-3+deb12u12_arm64.udeb 6c47de556c73cddd0f91473ef03bcb04cc28bfeda468db9cbb5ad44d20c1faa9 3591348 xserver-xorg-core_21.1.7-3+deb12u12_arm64.deb 80bfb418615f8b2f4bbb752ac0dbb4535d2242f74a41f3d063cf5eb58b4f7e48 2554988 xserver-xorg-dev_21.1.7-3+deb12u12_arm64.deb c45b275b92017d192e40b8b6528270d1c780ca1b3fac2b36dce373fd089fb875 9468 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_arm64.deb 830d24a98cf94b41de376ee0cb3d5bb928800dd4ba0892a59bcc0454ce004f94 2388960 xserver-xorg-legacy_21.1.7-3+deb12u12_arm64.deb 93f8cf8167502f285d17ec0ba7d2d65b07ce40f6e30049dfb43e1b35771fe21b 3207660 xvfb-dbgsym_21.1.7-3+deb12u12_arm64.deb 3ce959c2bbd0c0d00a325df76acad3b05fd28d688875ad1e44609da2111fde7b 3084952 xvfb_21.1.7-3+deb12u12_arm64.deb Files: f4e1ffda3f1774645cc8ad6aded47519 2646736 debug optional xnest-dbgsym_21.1.7-3+deb12u12_arm64.deb f4f31ae85a34ecc44af03b31b03f518c 2963396 x11 optional xnest_21.1.7-3+deb12u12_arm64.deb f56062b413f2dd3e9afb9f403e6cc5de 15005 x11 optional xorg-server_21.1.7-3+deb12u12_arm64-buildd.buildinfo f861a0f59a54f43e15e306d65a909372 3879364 debug optional xserver-xephyr-dbgsym_21.1.7-3+deb12u12_arm64.deb d3eddd70973e2b7e2fc0d57aae3219b9 3206156 x11 optional xserver-xephyr_21.1.7-3+deb12u12_arm64.deb c3ee2a2dbc4cbf1f72ca7a59940cc5f4 5720456 debug optional xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_arm64.deb e9f1e2db4f88086dc5f34eafb868a270 883288 debian-installer optional xserver-xorg-core-udeb_21.1.7-3+deb12u12_arm64.udeb f4e2d738838fb8dcb68bf99f3a132958 3591348 x11 optional xserver-xorg-core_21.1.7-3+deb12u12_arm64.deb a2f84ebddc9cf977aed990bb0802b5e5 2554988 x11 optional xserver-xorg-dev_21.1.7-3+deb12u12_arm64.deb 3d2f1ca9a10e4514854e0bd47c601f42 9468 debug optional xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_arm64.deb 92bf956e790bbfc7e20124d50f74b7dd 2388960 x11 optional xserver-xorg-legacy_21.1.7-3+deb12u12_arm64.deb 098f92f250057db409d787fd8d0cbfe5 3207660 debug optional xvfb-dbgsym_21.1.7-3+deb12u12_arm64.deb 7e1a8409d8af39353ded580988b44fba 3084952 x11 optional xvfb_21.1.7-3+deb12u12_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0Ha//LlsGOpbQ/H4xqCFmsOWgoYFAmn2eeYACgkQxqCFmsOW gobDCQ//W1zAIZGuDD1LkZvZJax13+6zM/06ut+4iGnEdD6V6mVZ6AkW54HBX+nB 56Cfxn1U4qpdySWjxsHxb1KtCKs/3qZhDqsQpTNakqUdugG9pV9XgbhTctQ8cWse moSjxshvyJylv1q30iK643y+eaKrC9QmB0G0RSlV69O7wMBDZuNavBC632UEs3jM zRfUzitdh537mo3Xx5hrSACcsbiOrkLECCSoH3lyGrxg6GIzoKpIFHUcnzK/YYa1 1sSm9X2Qyr8aaCkNv1cOdu8lg8tauEyc/Y8GFtIgX3Yaq9WEhCp6wQLRbxe0YJYk ZqJbBpI7vP6xeXUqErCPas2PI8TDMhFBFFDuWV9hklQXIfeIsQA845dNnzCBbvzv bDTd+OzNCAvojBHD1t6j1zWDekEK/a175wnT7qV4ToHD7AILS8Y46stAYrgzMCbx oxTyg+NiJ5FfISQ7AXJG0KQS7hGr/VoZK9WcJmCNzkSfEyV+6PLEhUf6Gpz82KXC Th5qtMdOI9RC9CE4TL9qZRiof1Rs3p8/+6LYRvO5bFDt3Y1G256j39xxv7BwrRvD 45WcpGGR6tFiwrCTJ2Oi3nXMRAFHVuHPCfnZIdfAL1UzfviFNHCoCxWk7PphDwyX 771pXoudy+FyPu18fhmoTJ5okD0GpaiCVbf+NSE7B+cnNT/TdXY= =bu0T -----END PGP SIGNATURE-----