-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 24 Jun 2026 14:06:35 +0200
Source: xorg-server
Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym
Architecture: amd64
Version: 2:21.1.16-1.3+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 xnest      - Nested X server
 xserver-xephyr - nested X server
 xserver-xorg-core - Xorg X server - core server
 xserver-xorg-core-udeb - Xorg X server - core server (udeb)
 xserver-xorg-dev - Xorg X server - development files
 xserver-xorg-legacy - setuid root Xorg server wrapper
 xvfb       - Virtual Framebuffer 'fake' X server
Closes: 1138680
Changes:
 xorg-server (2:21.1.16-1.3+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260)
     (Closes: #1138680)
   * sync: restart trigger list iteration in SyncChangeCounter after TriggerFired
     (CVE-2026-50261) (Closes: #1138680)
   * xkb: reject key types with num_levels exceeding XkbMaxShiftLevel
     (CVE-2026-50258) (Closes: #1138680)
   * xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259)
     (Closes: #1138680)
   * glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262)
     (Closes: #1138680)
   * saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow
     (CVE-2026-50263) (Closes: #1138680)
   * dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN
     (CVE-2026-50256) (Closes: #1138680)
   * dri2: Use booleans for (fake) front buffer tracking in do_get_buffers
     (CVE-2026-50264) (Closes: #1138680)
   * dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264)
     (Closes: #1138680)
Checksums-Sha1:
 5e6066bdee309b7c041345546647d76b180bd2bc 2740184 xnest-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 f06f698d5fff2cc094bb63e26835deefffb8ab42 3051724 xnest_21.1.16-1.3+deb13u3_amd64.deb
 e3d8326a7ace8ce2eee4a60938517ddece54fd7a 14854 xorg-server_21.1.16-1.3+deb13u3_amd64-buildd.buildinfo
 448892856b14c49b2b05be0deea0e2d94bd1174f 4042476 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 817bec4a160a6ff5fe49d41b56ef59f19088cc48 3342760 xserver-xephyr_21.1.16-1.3+deb13u3_amd64.deb
 8b6b01307c6e272a7206dd1d8ed5a8d35dcdbd77 5921060 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 fa1f218b4ae9f82d590f30a6a4db9c1661b2fb59 994444 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_amd64.udeb
 eeb5ea90ae8f1258c53a1c34bcc6a21a8060003a 3778060 xserver-xorg-core_21.1.16-1.3+deb13u3_amd64.deb
 c743399c49bba052278f48c73cd28b394a2653d0 2581576 xserver-xorg-dev_21.1.16-1.3+deb13u3_amd64.deb
 458318690c2ea964919f867f8bc73ca4d0b74233 9076 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 be2f58373cc54fa7903163f3da05dd6cee125040 2415524 xserver-xorg-legacy_21.1.16-1.3+deb13u3_amd64.deb
 fbbf94043d0e7099481de3c016945a0b0277e0a3 3354220 xvfb-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 e177b7826bcbe630739514fd312108c874cab643 3198040 xvfb_21.1.16-1.3+deb13u3_amd64.deb
Checksums-Sha256:
 f620ab2add66ad1ae889ac8d6827af2571707a32d36d1aa4e19149b18f3be922 2740184 xnest-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 d1bb61071e68e482258ec6a97ede8374072daebcf21ec47192f2e64e22333958 3051724 xnest_21.1.16-1.3+deb13u3_amd64.deb
 d83532311c0b72f1abf96d485a73f9a899e00f4f381e4e2a1ff4aae5c38f1815 14854 xorg-server_21.1.16-1.3+deb13u3_amd64-buildd.buildinfo
 f58ef5606fa0e7d4611a474c0f724deb73a44ad286fca36139bf407fa62bc3bf 4042476 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 b259107c58b8253b7d09a9f3394beb6b5cab20997935b035594962d5ad99541d 3342760 xserver-xephyr_21.1.16-1.3+deb13u3_amd64.deb
 9cb541cac6b94352752322377cc41c9bed6cc4374240cce532f863c8aa09d5a3 5921060 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 52afcc9ead07fc3d24bcc3328c83b67f524266034614c2f6505a66952ab3bac7 994444 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_amd64.udeb
 9839cb362cf27ef65ec0c9b400aeb1dc430025f0da787e02fec61721a4b9e640 3778060 xserver-xorg-core_21.1.16-1.3+deb13u3_amd64.deb
 4eeeefc0e02d9a2e2f9970f44a7fd526140ab8984e7f7d05e0d153ce32471aa8 2581576 xserver-xorg-dev_21.1.16-1.3+deb13u3_amd64.deb
 c79b93af4a25cb3263a43fcfcd4a2f5403cf03f32cf6e73c98b4d64d1809d530 9076 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 528e4d2e0d26c9598fa5a332a97b01294fea91310d5fdc6cf468a5ec780b3f23 2415524 xserver-xorg-legacy_21.1.16-1.3+deb13u3_amd64.deb
 f199a4abe7b68fcc7440aa14744a2dae1f06e2f8c2efd7e68d3dfc859e08a597 3354220 xvfb-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 365da2b6c93339f34337c434a9489bb6411a240fa47b9f49693d3091745f28c2 3198040 xvfb_21.1.16-1.3+deb13u3_amd64.deb
Files:
 48eeb765553fd1b2392d5fe9e0f19b7f 2740184 debug optional xnest-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 8c26645edf0ce5f5590381de94eb71a2 3051724 x11 optional xnest_21.1.16-1.3+deb13u3_amd64.deb
 8d90750b23cb89cd6ad92a0b30c34e74 14854 x11 optional xorg-server_21.1.16-1.3+deb13u3_amd64-buildd.buildinfo
 8fcf9e01ea07f2ca7caa3c74f911e84e 4042476 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 1f8b6421d2efe47ad988444aa1400183 3342760 x11 optional xserver-xephyr_21.1.16-1.3+deb13u3_amd64.deb
 d67a64271c3c2e2a30d872b67561328f 5921060 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 eb9a46f5f4b6328855606671ad93500f 994444 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_amd64.udeb
 e13e5a11c85e2612bfe775a9e2c9ebd0 3778060 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u3_amd64.deb
 7aeb7c3eb45c2c46c5f5c711cddd7f2c 2581576 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u3_amd64.deb
 b16bbed1f66f438b7d3748fe70d807bf 9076 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 8b7cf3c982c7e277a4e60e9768564a4c 2415524 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u3_amd64.deb
 6d5cee5825514fa0b3458d20c58f0503 3354220 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u3_amd64.deb
 05804e8eff577d238d15145f835f873c 3198040 x11 optional xvfb_21.1.16-1.3+deb13u3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=H1G0
-----END PGP SIGNATURE-----