-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Apr 2026 02:36:53 +0200 Source: xorg-server Architecture: source Version: 2:21.1.16-1.3+deb13u2 Distribution: trixie Urgency: medium Maintainer: Debian X Strike Force <[email protected]> Changed-By: Salvatore Bonaccorso <[email protected]> Changes: xorg-server (2:21.1.16-1.3+deb13u2) trixie; urgency=medium . * Non-maintainer upload. * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999) * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000) * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001) * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002) * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003) * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003) Checksums-Sha1: 5c43142c6171533236e8674425c196316a821448 4236 xorg-server_21.1.16-1.3+deb13u2.dsc 9d6bfe8218d3b009eec4d723088045b55fee7cbc 194227 xorg-server_21.1.16-1.3+deb13u2.diff.gz 3833b3cbeb59255bcf21ac75a6263cd64bffa999 8446 xorg-server_21.1.16-1.3+deb13u2_source.buildinfo Checksums-Sha256: 24b7f450723ca60990df1dec60906fb17e86501003ceab73bf42eab583b93fe4 4236 xorg-server_21.1.16-1.3+deb13u2.dsc 30d45dfe68a1e2e6773815dc702a8120240558dd1912af10edd3c82f9c9b0ad4 194227 xorg-server_21.1.16-1.3+deb13u2.diff.gz 6cc172ed6320f93729304ba3fc72b2f8f833ca63bd33811fbd2d774468b49247 8446 xorg-server_21.1.16-1.3+deb13u2_source.buildinfo Files: 255880f3cf09ed0496c13aa376acaa95 4236 x11 optional xorg-server_21.1.16-1.3+deb13u2.dsc 73eff967d0844274cb60b7c628ce7e24 194227 x11 optional xorg-server_21.1.16-1.3+deb13u2.diff.gz e99744327801382e877386c568b508bc 8446 x11 optional xorg-server_21.1.16-1.3+deb13u2_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmnml4VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Enz8P/iJtLGFgjPqu0HIOV8xUo7/f9vpyrrq1 ZUDh5JCV9h6HSxoJLK9Bxynuw3G9KYZk2YJCPpLBtGSjsVb5mq1iw9gI5m0Z18P2 dkDUDBFOQQNa8jJi4sNyBFpuxoLY2rLDVmdrWNBcbt5DQ3gga+sSG/hrHipBqyJw 9s9+Gm6TRLz3XuPn2ZS3jS4+jsY4z37AMhEqpJjT4umadaRcIAujU7P7UlduZAlB 2CcykJi40eE76FAGKanM7IK/V6CuCSG4Z7UhuA+ZUnYka2ehTAv0PxgKXIW611nt CcyJ3LPl3hY+FJ6HFAFyyeKoGVw9Y0bzKj/hi7sj3seY6OyoXWGYOc8nVCM/srD5 GMgMq/h87bMZ+8O0cLE4NjOVprxBuTbbXZLVQYJIeWBpPcV1i9GenULJtPvhnVPz APx3S+F3fikfI6o9XmKIlguc4S35C/4tEKh9+KhTDVOSNkjJ1hDZv4oFaN58KeOg qb1w8P/nmKx3gZKrsIRtW0Adoj/cjWuvEQXr8KbqSHcqPlfDgOn7JzFAY0xmH+gH jP5a4qfRSgK5LHHSQ7wKU2OBHDkO+3L1DcPRay2TsR+GpPPPVJlSuy8T9Iwl9cne JRM/QcUH3wW5HyMeu5kYeClVCfV+cFftW6rGwINye/BxqiTQnh71Jgx7D2D9Xjvr OmpCjiHT7sfG =N3Vm -----END PGP SIGNATURE-----
pgpOrTn2D8IiA.pgp
Description: PGP signature
