-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:48:00 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: i386 Version: 2:21.1.7-3+deb12u12 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.7-3+deb12u12) bookworm; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: 60321732f12eddfe491aa40980c3832b1ee5c116 2440028 xnest-dbgsym_21.1.7-3+deb12u12_i386.deb eaee82102436d70c0d8b57bb7fd39a17cc169781 3060528 xnest_21.1.7-3+deb12u12_i386.deb 49a58acc08a295fb27b664dca3d101fc7ce162d8 14831 xorg-server_21.1.7-3+deb12u12_i386-buildd.buildinfo 2221ed07ac5f8577e21784093755b03f19b2787f 3580488 xserver-xephyr-dbgsym_21.1.7-3+deb12u12_i386.deb bdcd88bf8619e140297e041332d70507dab3f536 3352132 xserver-xephyr_21.1.7-3+deb12u12_i386.deb c2705e299581bb1b512fc524d3eab101ab1f62f7 5307064 xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_i386.deb 92b0ebfb59058a22dbde25a910bf8b5c541c6073 1013884 xserver-xorg-core-udeb_21.1.7-3+deb12u12_i386.udeb 9032de987cbe096abd6742412433f265447f6991 3786504 xserver-xorg-core_21.1.7-3+deb12u12_i386.deb 6ce3321b6ea82c7d5fc282b81eeb2de0cbcd1e9e 2554968 xserver-xorg-dev_21.1.7-3+deb12u12_i386.deb ae87d1e6acaac6367b70bb504835d219a9f75834 8608 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_i386.deb 58d95c4e5f8b4a669dfeeca222eca287fad6c615 2389000 xserver-xorg-legacy_21.1.7-3+deb12u12_i386.deb dc9ab2b21b457de41f0c962e668a20ac37247c92 2969024 xvfb-dbgsym_21.1.7-3+deb12u12_i386.deb e9d885532cb98ecbc141643a320967286612b16b 3206024 xvfb_21.1.7-3+deb12u12_i386.deb Checksums-Sha256: 8c9f393f5f3a54be0d44345d6e91d5cf775aa139cca69c49bbe5bff1c42a2839 2440028 xnest-dbgsym_21.1.7-3+deb12u12_i386.deb efd43ab67558c2093105d7dec3bd13ed77691c9f518c4c371fd3dec617ec11cf 3060528 xnest_21.1.7-3+deb12u12_i386.deb 86839fdccea9469d610e588f3eea16777ea42955a8288f0da82dea2622875e7b 14831 xorg-server_21.1.7-3+deb12u12_i386-buildd.buildinfo 0900734300be333f313c62f92ce8538fec4ca0075332e821ad4fad912fc241b1 3580488 xserver-xephyr-dbgsym_21.1.7-3+deb12u12_i386.deb a1a57ae9fe171861a60354f51e3d67f1235a6e370142bb3175410a7d4aa33259 3352132 xserver-xephyr_21.1.7-3+deb12u12_i386.deb c726d142da7f4b1fbd461d0db6685d40bafac42281e76327ea87b26c75415eef 5307064 xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_i386.deb 4bc3ce1c16d58451b2feb22d15cb8417df4bf08610ec4323d1b9249d822ea59e 1013884 xserver-xorg-core-udeb_21.1.7-3+deb12u12_i386.udeb 0d43d257ae562911b20bdf29a2b131cd15768780a3dec3b4ac4c3abce0811131 3786504 xserver-xorg-core_21.1.7-3+deb12u12_i386.deb 4643a520d64fb602aee98ac0f6088f7f19fb260e8ffa80342f36115521d98934 2554968 xserver-xorg-dev_21.1.7-3+deb12u12_i386.deb 198f04cbb550f9906fcd0ba6aa0f41030671f51727d132bddccf5c6a9e4cd68b 8608 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_i386.deb 66202a1ffb642caa8c1737407b102a7cd81d89562986f01d686848f07e77ff23 2389000 xserver-xorg-legacy_21.1.7-3+deb12u12_i386.deb 9a8a4bceb86582a8cc096f9c916a6efe251c6e9fd4e26cfd7d6f71513c552f96 2969024 xvfb-dbgsym_21.1.7-3+deb12u12_i386.deb a6db736a743033704d97b20754ad3df8bdd42f89eccc9ee813935d9f63dc0ece 3206024 xvfb_21.1.7-3+deb12u12_i386.deb Files: 3cd04c4d22f5c1577aaeba4d87ddd66f 2440028 debug optional xnest-dbgsym_21.1.7-3+deb12u12_i386.deb b0834a573aa2d04b1a7c77ed089984bc 3060528 x11 optional xnest_21.1.7-3+deb12u12_i386.deb 1df4a6d97e419a71f07f6349cf77e9d5 14831 x11 optional xorg-server_21.1.7-3+deb12u12_i386-buildd.buildinfo c22bc6375135e4ea1aefb65690feaee0 3580488 debug optional xserver-xephyr-dbgsym_21.1.7-3+deb12u12_i386.deb b519827b0fe84d65bb3f376e0b3effa8 3352132 x11 optional xserver-xephyr_21.1.7-3+deb12u12_i386.deb d357b625dff1470e29e6f41e9a38261e 5307064 debug optional xserver-xorg-core-dbgsym_21.1.7-3+deb12u12_i386.deb 14aae26525dbefdc8e79416c7e9e7d66 1013884 debian-installer optional xserver-xorg-core-udeb_21.1.7-3+deb12u12_i386.udeb 4cff3b917b1f6234d681de1a66c78bb6 3786504 x11 optional xserver-xorg-core_21.1.7-3+deb12u12_i386.deb 3332c678250dc7f64ef0799ee2fbfd43 2554968 x11 optional xserver-xorg-dev_21.1.7-3+deb12u12_i386.deb e1bfee757d0a0058ace662a98709d191 8608 debug optional xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u12_i386.deb f28e9729b3671d2f38c3b5f660d0c955 2389000 x11 optional xserver-xorg-legacy_21.1.7-3+deb12u12_i386.deb 2a30d9d6339910d3d8a361d06840f52a 2969024 debug optional xvfb-dbgsym_21.1.7-3+deb12u12_i386.deb 26ae08e5fe3284128284f20f38a9e613 3206024 x11 optional xvfb_21.1.7-3+deb12u12_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmn2epwACgkQGNGWmfrq ILGSYQ//f8N1Nvv71t7An6gnCtAKhayRitAenp8zQVdsaqdbM3rtfGOQUnrMSkQJ X7otJ1CdyAOdhmUny/fehFfEl9v6P8zpciWSAsf4BjrL0JNUujtWIJZkxTk8C6Fg 0EU1amQuzVxQUkOUwkA3LfRAXEBKC/Tx+EwM1iuRi3lhdkd/5TUL3c9pnH/fIspu iLQKAZ51sl8IKqmlgkVoQd4tMkSikYrRm7LSdRJfT3YVMT400vc4Ev6fNmrG1/Jg 3wLTAc5jyMien3kavtCIt4r2QbRrR9CKg1CYCOsAciFW4QwTL8jeW0g+3FeSvyIy IGI6C+SS+r+UkRco+tu0W1uuoFFjETBwSqPRRTY0WLDmk0uNFFA0thuZNV3ot1Cu Pd3NBl3bD3e/G6yY1PBFoYSbNV7GaGWGDTgzSYSHe6mcQpu9V3jBxn28ZX1fwgGD vLGHIDCzAo4eCjrzNgmt2qfX6kSceZ3tZOLlI4x8XSEJbRuaeB4fzMQmqoesu7Hp qIFMzT1qvkVuQue7CwILATKaLLYnnoDN3hJkGfOdqh+QwI1cvfL5x593/0zSJxXx iF8t/6KePjPAXFZhX7oL7Rgyqn54SAv1fP+5wNYzeKszwM/jkJwE/ApaAppHbWRL NeVR+rFUYFKWAKgORLNSVSbL73zGhDPjAX2Ofyl5TNfGqTgr3HM= =zZJO -----END PGP SIGNATURE-----