-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 05 Sep 2026 07:52:43 +0200
Source: xorg-server
Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym
Architecture: amd64
Version: 2:21.1.16-1.3+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 xnest      - Nested X server
 xserver-xephyr - nested X server
 xserver-xorg-core - Xorg X server - core server
 xserver-xorg-core-udeb - Xorg X server - core server (udeb)
 xserver-xorg-dev - Xorg X server - development files
 xserver-xorg-legacy - setuid root Xorg server wrapper
 xvfb       - Virtual Framebuffer 'fake' X server
Closes: 1141703
Changes:
 xorg-server (2:21.1.16-1.3+deb13u4) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * GLX: Free the tag of the old context later
   * glx: free old context tag before allocating new one in CommonMakeCurrent
     (CVE-2026-56000) (Closes: #1141703)
   * fb/mi/glamor: reject glyphs with negative dimensions
   * glamor: reject fonts with per-glyph metrics exceeding maxbounds
     (CVE-2026-55999) (Closes: #1141703)
Checksums-Sha1:
 54e3218d3916629be16a28cb12b9c27abdf4d0c5 2740212 xnest-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 6f8c15d2f9bde39f5e3177c2feb4d7d9bf5d72c8 3052052 xnest_21.1.16-1.3+deb13u4_amd64.deb
 b3727b7d5c407e8ef53cea700ba72c7fa5d58abf 15078 xorg-server_21.1.16-1.3+deb13u4_amd64-buildd.buildinfo
 93ec66967e4e1f7904e9d6db62d6bab7d32f2944 4043692 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 d292decccc38ecac5ccfa80eabd74991112129e3 3342924 xserver-xephyr_21.1.16-1.3+deb13u4_amd64.deb
 35093fda8194279f89ad53e9574c9adb4025579d 5923056 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 419b57d2e7ac1975613815ca9e6aae6098b946f1 994108 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_amd64.udeb
 f1da07e821cf5570fda8379954fea32a5f6f1d43 3778736 xserver-xorg-core_21.1.16-1.3+deb13u4_amd64.deb
 c786fad9882768fbf61cb399e33b095790374e35 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_amd64.deb
 991efa1ddd5da64f995840ef259b49e94506ef53 9076 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 80a51156cf2cfec64eb35732a21d0e1786fb0857 2415672 xserver-xorg-legacy_21.1.16-1.3+deb13u4_amd64.deb
 179d1357c9884a285152548195356b68ee24c041 3354900 xvfb-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 230d001137c0904ba83064a99305edf14a4adf50 3198660 xvfb_21.1.16-1.3+deb13u4_amd64.deb
Checksums-Sha256:
 32bda2b5755285d3fde7d3eb8631880d71d591275d9e3a0184779b3b3f821070 2740212 xnest-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 7c088b42131ee1bda4a46a469798873f5a7f579c5603dd40518e88d2da92498c 3052052 xnest_21.1.16-1.3+deb13u4_amd64.deb
 5a211ed507d00754ea23e430111a389671d54cde67c16275569a90e5bad52be4 15078 xorg-server_21.1.16-1.3+deb13u4_amd64-buildd.buildinfo
 16b85f35880ee7741f5fce44bdb0f64df5c8735544ffef4c8e60c1585d7d5a72 4043692 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 c3e26e8da745b6779b68a245c8ea88c585f58f18659710c7e1c33d1fbc57fd78 3342924 xserver-xephyr_21.1.16-1.3+deb13u4_amd64.deb
 50e4d7ff5c004f9df37c83e5224e04f68f1fc68892c272866f9672dad09a23e5 5923056 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 9b436402e3a32affb34f4e7a84c2150efea5ea42609033fcd719e341f80d71e8 994108 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_amd64.udeb
 f35ebbafc3246460d7256ca16a395fc4e736d3da5dd285a7a1a5d101489d5f6c 3778736 xserver-xorg-core_21.1.16-1.3+deb13u4_amd64.deb
 cd0118f55c7ea026d5cc6d32eef5f5ff6e88bce5de4917a145564d1030ca4846 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_amd64.deb
 cde64a258dda60506f368eb811d825d8c32b631138d177214c867da55bd2c7d0 9076 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 503dfe6939b78bfa7bd07ec03257a93e1fb53b0aea7316a28b68f05645f7f050 2415672 xserver-xorg-legacy_21.1.16-1.3+deb13u4_amd64.deb
 491904bf6ee2de738c2cd6b4ba34c2ed460578cfbedebf4f0df189bbc7fed3dd 3354900 xvfb-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 893d87bf159b6de077a929fc796a73c39f837d45310b2076e3eeebebb80552b6 3198660 xvfb_21.1.16-1.3+deb13u4_amd64.deb
Files:
 22b8e2ec929ea764d911fe0a19700d83 2740212 debug optional xnest-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 74fe9c5045665f52329f271ee426ade1 3052052 x11 optional xnest_21.1.16-1.3+deb13u4_amd64.deb
 4e8b400b2189a5d7f22da745186286f1 15078 x11 optional xorg-server_21.1.16-1.3+deb13u4_amd64-buildd.buildinfo
 06475aeb213d697dceccb426490a720a 4043692 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 dbf349addd6451a90b5cfa544a814fc5 3342924 x11 optional xserver-xephyr_21.1.16-1.3+deb13u4_amd64.deb
 d277ce4728130f1625b06d778d5da75d 5923056 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 21e940c5f3a907571a2de2c5f597ff58 994108 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_amd64.udeb
 ec31ecff0473faaafffb54c68541ecbb 3778736 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u4_amd64.deb
 dae94f0db7bf792a0b538e3b90940a07 2581764 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u4_amd64.deb
 6eb3e3d1dd3068310fe607a9d03d927f 9076 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 c70e5866636ed11c601d4d641f73c18a 2415672 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u4_amd64.deb
 33f9418ba4aba0164a5eb810dcfa9655 3354900 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u4_amd64.deb
 74078371ef710e9b598b8a218c672590 3198660 x11 optional xvfb_21.1.16-1.3+deb13u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=l4LI
-----END PGP SIGNATURE-----