-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 24 Jun 2026 14:06:35 +0200
Source: xorg-server
Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym
Architecture: i386
Version: 2:21.1.16-1.3+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 xnest      - Nested X server
 xserver-xephyr - nested X server
 xserver-xorg-core - Xorg X server - core server
 xserver-xorg-core-udeb - Xorg X server - core server (udeb)
 xserver-xorg-dev - Xorg X server - development files
 xserver-xorg-legacy - setuid root Xorg server wrapper
 xvfb       - Virtual Framebuffer 'fake' X server
Closes: 1138680
Changes:
 xorg-server (2:21.1.16-1.3+deb13u3) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260)
     (Closes: #1138680)
   * sync: restart trigger list iteration in SyncChangeCounter after TriggerFired
     (CVE-2026-50261) (Closes: #1138680)
   * xkb: reject key types with num_levels exceeding XkbMaxShiftLevel
     (CVE-2026-50258) (Closes: #1138680)
   * xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259)
     (Closes: #1138680)
   * glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262)
     (Closes: #1138680)
   * saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow
     (CVE-2026-50263) (Closes: #1138680)
   * dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN
     (CVE-2026-50256) (Closes: #1138680)
   * dri2: Use booleans for (fake) front buffer tracking in do_get_buffers
     (CVE-2026-50264) (Closes: #1138680)
   * dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264)
     (Closes: #1138680)
Checksums-Sha1:
 92c4fa1eb74808e5199ed30e099b18f97b579304 2528504 xnest-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 7521fefade97bec04aaf652efa8e9c599e077725 3099000 xnest_21.1.16-1.3+deb13u3_i386.deb
 06358c131696a5215ed40893eef7d2606fb7497d 14728 xorg-server_21.1.16-1.3+deb13u3_i386-buildd.buildinfo
 3bf744f4e23c7324e076fdf91571a80b1c0a1c9b 3691700 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 aff0552fdf64049e9a720abf4d2f9096fbec3612 3398556 xserver-xephyr_21.1.16-1.3+deb13u3_i386.deb
 3b59082c2129aa2fd61f4c7739db8daa1e691df0 5450796 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 7ebe87d9017c9cbd68b1187dc4d43fb95d7fb33d 1034944 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_i386.udeb
 460d9b7a0d25b495938661a78f7d94b3ce52af59 3840960 xserver-xorg-core_21.1.16-1.3+deb13u3_i386.deb
 5b71c088fc1ef3410022a163a27b81765e170929 2581572 xserver-xorg-dev_21.1.16-1.3+deb13u3_i386.deb
 dc1a18ff1aba9c4baaeacbcbf155b5ea7a0e77a0 8708 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 a78c92150d427e79fab5e323d9b2a92372693228 2415472 xserver-xorg-legacy_21.1.16-1.3+deb13u3_i386.deb
 4460f934bd63941fecfe6d04edcd40dce42586de 3068404 xvfb-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 00a68b2f2390c9d21821a7f2d8b7147be903c94c 3247492 xvfb_21.1.16-1.3+deb13u3_i386.deb
Checksums-Sha256:
 23e6b6adcf3528134540233b3f35947ee1bdc27a6600f9cd460907c7abddf028 2528504 xnest-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 8217d4f16133d9127e37d27dafd93030aa2be8b0fd071c72b415617303552716 3099000 xnest_21.1.16-1.3+deb13u3_i386.deb
 1ffb6acc861a257655d21612cd056f6e373e65484799ec2d2e85c8a3e3e7ff88 14728 xorg-server_21.1.16-1.3+deb13u3_i386-buildd.buildinfo
 f9e67a1a22cc2591837bd6fb4f8acc04821986bfb18a5b14e9dfbcab1a5a6a1e 3691700 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 cbda9532f4facea79f97681eb552e1601d9896bf11be1061a8c336809905fd7c 3398556 xserver-xephyr_21.1.16-1.3+deb13u3_i386.deb
 b7208158cbaf64402e8352bd332526a0dc693e5081e2e82ca172694321066c39 5450796 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 711ebe54581b8bf396a34a66b8cc4412f78f757f08d1437f5d8af4c4b5e4c74f 1034944 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_i386.udeb
 cfe9a68dba5a59209042288506e5d23a22fbcfe368e1c96c9b3014da05c10146 3840960 xserver-xorg-core_21.1.16-1.3+deb13u3_i386.deb
 3eded076a4f4a1e63a7a3c7ac08a8bfba8fa4591167fd4d42833ca0e81b96704 2581572 xserver-xorg-dev_21.1.16-1.3+deb13u3_i386.deb
 fddc06c2692f4968efecde84a94c1763d2f13b3411d043d2074fa815e3b78476 8708 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 c502ebcb9661aa86d364c68faf1ac130652f75e14b2bfbd9d1cbde013f7d299c 2415472 xserver-xorg-legacy_21.1.16-1.3+deb13u3_i386.deb
 fe75dc0cc38120ca53b052226cb03baabcbc462361e8b94862b6b26517000e46 3068404 xvfb-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 060e6565d033bef2bbf17010f973df46c502e198d5b3aa9c1e23fa99147fef27 3247492 xvfb_21.1.16-1.3+deb13u3_i386.deb
Files:
 8c72014b94106bcb35f18610df94e42a 2528504 debug optional xnest-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 8917581e57a335f0e615f727e6d4249e 3099000 x11 optional xnest_21.1.16-1.3+deb13u3_i386.deb
 f7da2d40da5feb219ff03c612dfe6046 14728 x11 optional xorg-server_21.1.16-1.3+deb13u3_i386-buildd.buildinfo
 ac9e5a33081d4a7ec507ac0f1d16e787 3691700 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 07dbb84ea1ec0a3ca58f64e724006cd3 3398556 x11 optional xserver-xephyr_21.1.16-1.3+deb13u3_i386.deb
 6f4d039e22a543c16354e3ddd6ef9128 5450796 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 329b51bdaed67581cb6c70ad6df45a5f 1034944 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_i386.udeb
 961fb0f074e84e87c5b22abda0b9a530 3840960 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u3_i386.deb
 e04e12c369664af5b4ef244f25ba40d4 2581572 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u3_i386.deb
 951b68a101484e2e5ced06f4a9fee88b 8708 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 ffa3353dc83b5e33f3c23f8541708fce 2415472 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u3_i386.deb
 bfabc2d8d2aa1c178f25ef67670f06b1 3068404 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u3_i386.deb
 64b7395a3bb9c0ec438d64b2cc5b98b1 3247492 x11 optional xvfb_21.1.16-1.3+deb13u3_i386.deb

-----BEGIN PGP SIGNATURE-----
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=Lw2o
-----END PGP SIGNATURE-----