-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 14:06:35 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: riscv64 Version: 2:21.1.16-1.3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-05) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1138680 Changes: xorg-server (2:21.1.16-1.3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680) * sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680) * xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680) * xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680) * glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680) * saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680) * dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680) * dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680) * dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264) (Closes: #1138680) Checksums-Sha1: 3af5f8df3630ab8c85d37e28931b35cad3b6c303 2686536 xnest-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb cf6007b15e25c535e7699cad271b8f87d31c2eba 3092884 xnest_21.1.16-1.3+deb13u3_riscv64.deb b54bbff0a0387803fb5f25269e4fe8b43228fdca 14778 xorg-server_21.1.16-1.3+deb13u3_riscv64-buildd.buildinfo ee6de18dcc3e7b7676d83f73fca6d9b7bc8b4c39 3933064 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 5d3337fb5e2c7c4c286994244d569739583eb4c9 3381508 xserver-xephyr_21.1.16-1.3+deb13u3_riscv64.deb 7fc1646b84e8e3197072b76da23a1ef5f9cf62b0 5709120 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 6f3a3d0435fbd48c87a73c680b0b160cc0f9bbe3 1009936 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_riscv64.udeb a85bfe234ee47ff3d9ca83105591a070fc230e57 3812052 xserver-xorg-core_21.1.16-1.3+deb13u3_riscv64.deb 93905e7acb5c26b3667fa94a5ff366e251b2b57a 2581576 xserver-xorg-dev_21.1.16-1.3+deb13u3_riscv64.deb d58868f6d1c9fb4d5ba50dbda37f2b0ee66216ca 9580 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb ea6343998a49df83ddfb43b792118281ccbc5d95 2415312 xserver-xorg-legacy_21.1.16-1.3+deb13u3_riscv64.deb 55deeb26bab09837c21bd6f009d7c185a3153c24 3283504 xvfb-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 0176f36c89b88fa9ce878e1c58a180bf7a66c4e2 3241356 xvfb_21.1.16-1.3+deb13u3_riscv64.deb Checksums-Sha256: 6c3d5236219714e4fc5256317a2fea417130e1dea47e183f9fdfc4687a027f98 2686536 xnest-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb a23f1ab7d45e726faa99b632a363782b5f6703058b481a7a09f2a3a91dc72c34 3092884 xnest_21.1.16-1.3+deb13u3_riscv64.deb e171e286c245dcceae24691e1dcef85ebf74bca12c7e6234c44c726fb56d27c7 14778 xorg-server_21.1.16-1.3+deb13u3_riscv64-buildd.buildinfo 09e1a52acb8d2d20cc3f15ba1a0abab82d9bf93a8357996185646275b1f53a04 3933064 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 409f7bc12b75515143693136b9217bdd30718d2d076a8f197884134afba0a876 3381508 xserver-xephyr_21.1.16-1.3+deb13u3_riscv64.deb ab893d006ac1a40f39acf69ac9ad9ece5f26a1d01c0530bf6e2aa12f982bf3af 5709120 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 4ed85f4075874f78ca04efbff9c2f631d6d36d5af59f4e4800b27ffc06f98dfc 1009936 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_riscv64.udeb 7a9b0b260991d09a96abc0257ab556248e5c4c17f8a36ab5da8e2c5832779613 3812052 xserver-xorg-core_21.1.16-1.3+deb13u3_riscv64.deb 45cc2ff49734fae8dee8b73d47b75ca4d01e98f2a2b99399697c633bf91e3b2b 2581576 xserver-xorg-dev_21.1.16-1.3+deb13u3_riscv64.deb dab5f29cdf6d4a7c8c25e51e42c9c996f1a2a661ba95abb77c2172f79792b895 9580 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 42f47cd11e891dfd6d0871d0222968216115553cbc328f29ee902e0932effa63 2415312 xserver-xorg-legacy_21.1.16-1.3+deb13u3_riscv64.deb 1c48160d0960efe31ed3952997cf0475571b91bf5e2e3f64d2201aa7c482f8d0 3283504 xvfb-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 0e38e7cefd4add855e38f7c05766e41883eeafa894b8bd29e0be247dacaa4beb 3241356 xvfb_21.1.16-1.3+deb13u3_riscv64.deb Files: 38922b28951284be83de2c7923cafa58 2686536 debug optional xnest-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 0d1f6f6aee820bbecd7181fedcbe70ea 3092884 x11 optional xnest_21.1.16-1.3+deb13u3_riscv64.deb 4e1b2d7ed0cd652f4e1f946dacdeaef7 14778 x11 optional xorg-server_21.1.16-1.3+deb13u3_riscv64-buildd.buildinfo 558e65c791a62353c41303c9a21896af 3933064 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 205c5a8d101e84a3a7d9a1bc2e0f2047 3381508 x11 optional xserver-xephyr_21.1.16-1.3+deb13u3_riscv64.deb 75368795a6cff28135a3cc6946d0f256 5709120 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 77a95912a63e5c123f478f7be5c2c2f9 1009936 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_riscv64.udeb de7bfa34f45caa19510b442445b1873e 3812052 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u3_riscv64.deb 48e8e57570af69bda3a0999987e4c446 2581576 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u3_riscv64.deb 4ad64868803e4adac75cf87e4de6c231 9580 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 0bcc346456032d2f6e0962a56dbbc838 2415312 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u3_riscv64.deb 3489d9ca7a04455da1779580ea64da8f 3283504 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u3_riscv64.deb 5c149a643bab09b6991fa6395b047153 3241356 x11 optional xvfb_21.1.16-1.3+deb13u3_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEBzL0NgzYDvoyHaFq4N3weDMPIr4FAmo8N68ACgkQ4N3weDMP Ir5JJxAAkv+LFfr+6JkaE5VmfKG1VT29nVi/t7RyPdNaycfd/GxoFalFZbSH+njy XL0uQVj0dR3npd6TJ1OOO6szzvbZOE+H2u6r44mLiWnxBIGp+XLawp2E7XPxwmki HNd3gKWJId5oS2E2DmxDXVHedHHAmxxg3OqiMv5lvUTvHZyfWaUnyNBhlryrhQKY ivl+l5CKVNhjdyVVGa8m/NuTFGQOx5X+NM+65I7sSC3sQ3gUrlqhRDFiOoCvrw9J M3Hqv8mWtDmNhttIsbJDvXmve2VuAJADoK5xCXjtx+Gh+AyelQpkMFxtn8ItXUHR urhPY1r0UxlJLVlSgFnizsuOZZyH2yejFEjPbF1JECpClkgcTKLmzVZUCqJaAnw4 Rw6n6L97dVHS0z7Ma3QoKBsHa7Dh8QSj0t8lEvCQQkfJrbslYvoRlDgo/eOHngwj VawTFpvn4mPpNvwUQvPTOk450GWG7Hmre7VoHiNCGviiGCk3nJtmXixL7jfqx4K+ yu+RxyiXHHF1IuP8mynzAEsm9b2UXlupHdjtk7Znl4QG/QiPMe4ic22unTEIQy5m Wn08yEBWlrbywLNQDM+ioQ7mIkXSmZEsTL9gLUadIJaKyaK7ZPYDbzonNOKd5ZBA c05eON7KLLqr75LoEBI80sSbbH5cDjzixrbh5Le2vf4SHP5ypz0= =wMgV -----END PGP SIGNATURE-----