-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 14:06:35 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: s390x Version: 2:21.1.16-1.3+deb13u3 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1138680 Changes: xorg-server (2:21.1.16-1.3+deb13u3) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * sync: fix deletion of counters and fences (CVE-2026-50257, CVE-2026-50260) (Closes: #1138680) * sync: restart trigger list iteration in SyncChangeCounter after TriggerFired (CVE-2026-50261) (Closes: #1138680) * xkb: reject key types with num_levels exceeding XkbMaxShiftLevel (CVE-2026-50258) (Closes: #1138680) * xkb: clamp nMaps to mapWidths buffer size in CheckKeyTypes (CVE-2026-50259) (Closes: #1138680) * glx: fix reversed length check in ChangeDrawableAttributes (CVE-2026-50262) (Closes: #1138680) * saver: re-fetch screen private after CheckScreenPrivate in CreateSaverWindow (CVE-2026-50263) (Closes: #1138680) * dix: increase XLFDMAXFONTNAMELEN to match libXfont2's MAXFONTNAMELEN (CVE-2026-50256) (Closes: #1138680) * dri2: Use booleans for (fake) front buffer tracking in do_get_buffers (CVE-2026-50264) (Closes: #1138680) * dri2: Deduplicate attachments in do_get_buffer (CVE-2026-50264) (Closes: #1138680) Checksums-Sha1: b20cca886ec86c8f928f2e8f6a9f4335bb7239dd 2763636 xnest-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 03a5914e4f6111d67e8dc9437059ee65f875eafd 3049804 xnest_21.1.16-1.3+deb13u3_s390x.deb 141a8d9bd5445de99e15ec584e6a26b560b668c1 14603 xorg-server_21.1.16-1.3+deb13u3_s390x-buildd.buildinfo f7d4171875264850954df7375d1ae12863e420ab 4071976 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_s390x.deb c0cb1b3742608d98fd27e62d09515764d5891c1e 3332768 xserver-xephyr_21.1.16-1.3+deb13u3_s390x.deb e69cde5031977ac157afcf17c90914a22401ebad 5896388 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_s390x.deb fbbb3dd0065b95ee93390b01e5516e92412cb3d6 994360 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_s390x.udeb 7463695fd1756259c1c10370c57763c32c156342 3757620 xserver-xorg-core_21.1.16-1.3+deb13u3_s390x.deb 81a3765f5aa0feffd291d1822ddacdea2e530525 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_s390x.deb 75d160c0b28ccc9f42a131b1440d43a8a3cac616 9480 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 3267205e51c45e49f1915590217464c50426ebab 2415552 xserver-xorg-legacy_21.1.16-1.3+deb13u3_s390x.deb 7b7d95d2c211f9260cedb094f4354080d6619a63 3392092 xvfb-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 7d00cd4419119d21bc4160a3ca6bafff91050d37 3193864 xvfb_21.1.16-1.3+deb13u3_s390x.deb Checksums-Sha256: 3acbc74f1167e428b29d0731f9772ae17b26c0a2ddf36b1c1cdc33c10a2e5a79 2763636 xnest-dbgsym_21.1.16-1.3+deb13u3_s390x.deb d7981b47dfdf8c4b483287c6d80ace37026f24e18fd781bfe471e38bac533c31 3049804 xnest_21.1.16-1.3+deb13u3_s390x.deb 23c31c776ece776c5e9d0fc64109baa977a21ccec5eab96f7c37edeb3afefbd5 14603 xorg-server_21.1.16-1.3+deb13u3_s390x-buildd.buildinfo 77c3b8d3b89e5e989206b959f96d2c44c67676302a8689d4ec359de0938d1241 4071976 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 447e38efc1636ce7935f3791dd8e708cebb74d0b40de21b70618c852bff07a6d 3332768 xserver-xephyr_21.1.16-1.3+deb13u3_s390x.deb 36e895d32471de1977ec4b53fcc6df005d90e8f65683417fa2989678207f608b 5896388 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_s390x.deb aeed62381c6902e4bf2a81003a3e07809f963f75f8402d7866ba4bae3aa73697 994360 xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_s390x.udeb 7852e345d0f49359cb7c6283226c5b35f2ac30cf199050c46bcb864740702711 3757620 xserver-xorg-core_21.1.16-1.3+deb13u3_s390x.deb fd3c77fd750e50d888df4fdf2012f6bc95d42319e699d597de1998c0099bccf8 2581580 xserver-xorg-dev_21.1.16-1.3+deb13u3_s390x.deb d9e42c0e579ef4ace71584383d0f304853eca0781ba5b9b40786eb184484f1ca 9480 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 23e549ac490f02912c3c356c525acd3d41a7305004ddf1d50a50fe401d250b8b 2415552 xserver-xorg-legacy_21.1.16-1.3+deb13u3_s390x.deb c6573398c9ebd6608a9df2c3e525a4c5278905541ac532db0b94ea1c0381beee 3392092 xvfb-dbgsym_21.1.16-1.3+deb13u3_s390x.deb b123eb3f85bb280689005af309439351610c5f84032e377e7954b6599d7babb0 3193864 xvfb_21.1.16-1.3+deb13u3_s390x.deb Files: 0caf12ee1999d965afb4e5eed67788b3 2763636 debug optional xnest-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 55c63178cc978012114c78ded7c795b8 3049804 x11 optional xnest_21.1.16-1.3+deb13u3_s390x.deb c395f4b68278ab66471210e8f34053e5 14603 x11 optional xorg-server_21.1.16-1.3+deb13u3_s390x-buildd.buildinfo 2fde3f4774a0915df30f66d3e1c4e153 4071976 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 8939b0d36995264da93664e4eddaee58 3332768 x11 optional xserver-xephyr_21.1.16-1.3+deb13u3_s390x.deb 84554126478f3df744c9c180dd19d815 5896388 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 077398886927cd8aedf72e51017b475d 994360 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u3_s390x.udeb 3b0da04aea648106faf79f525716b0cb 3757620 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u3_s390x.deb 2c7a7a2dfaa97ecea10ae69a6d8084fc 2581580 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u3_s390x.deb 06224d2b39096eb99a9e21aa67bfd350 9480 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u3_s390x.deb 4b6d58cd410affece83f9ba4cacd92ac 2415552 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u3_s390x.deb 558dfeb1f1d6d7d9daa72ab24c2c8cf9 3392092 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u3_s390x.deb f8decebd4bbbff60c50d97d919e05ed3 3193864 x11 optional xvfb_21.1.16-1.3+deb13u3_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmo8Lc0ACgkQvVOPI7pY Npjfwg//XoqkxrWrGEQGX1pngnqFoiUEuz2gyLl2yTTbQjzvrQmFHUrosOqJcsnZ vZmfE/hybwVjhAh5rTy4BHtwnilwPetx93WoK3Rq03bemBRWTT68ZI7WGKzDBQHe 1eRkjpN4SGc+3T9uPJSUMS/g+cBwlXHiwC14J1QKd7o9cahMZ5AcGCBFSa8FAC34 UK0MEu95b4P+85/sqD3feJ3pASL2YljPa+xp9BBh4v3YMKaNNpUKKjl2vdpeFgJu pKoV6q48+PbZW2Vm+l/ADi0kZvu+M6WIo2CwGSQRKwyQeKv0Bv4ryT6cpeed9SeG Otcit6Cqf5Dn1QqS8emxzxFaremGiKOXiwGXjv2NFd4WNZyeswSX8AmAOUehcllY ecNg6indQBg+yguqrsPNR9x7C+rmtJCEs1jmlmHstdz1E560YOGqHE6wieAcmEdF qromovPyoT23WIUC/hqeJqToHrG1PdPS2g6QnUpQzsHnkJ7HyvHQTDXJ497B+HvD /IiGRb9T1oPKAbyW2fbZVnLA7DWSGWOTvWGnQwzGb2KkFYnTFxaCnqPz57XA9Z8O UkO0jkJ2clEPOJzrQi5iBKXFoy5nVZAc0fJT05FCNcj2GAr9ltF5SDAukZr61sVz ASbY+m7VDu/ywfU/KOta3KjUvrt9RjV6BAr3G0WXsOnK4VfYRhc= =qfH+ -----END PGP SIGNATURE-----