-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 05 Sep 2026 07:52:43 +0200 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: riscv64 Version: 2:21.1.16-1.3+deb13u4 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-03) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Closes: 1141703 Changes: xorg-server (2:21.1.16-1.3+deb13u4) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * GLX: Free the tag of the old context later * glx: free old context tag before allocating new one in CommonMakeCurrent (CVE-2026-56000) (Closes: #1141703) * fb/mi/glamor: reject glyphs with negative dimensions * glamor: reject fonts with per-glyph metrics exceeding maxbounds (CVE-2026-55999) (Closes: #1141703) Checksums-Sha1: 5551b6190888bf00878064a41bb6568e88cce608 2686452 xnest-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 53161ec9e6e58935338573b75f29dd490655dcbb 3092684 xnest_21.1.16-1.3+deb13u4_riscv64.deb edaf18112cc3613c6682dc2cd7953f7104195fc7 14994 xorg-server_21.1.16-1.3+deb13u4_riscv64-buildd.buildinfo e0cc0684af92170d302f7ef755be0ffae2d2017a 3936064 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 5a4e3aa5b0638291c0a5daf321d21dbfff27868f 3382168 xserver-xephyr_21.1.16-1.3+deb13u4_riscv64.deb b83fced9d1ac4562bd130b7441c722a92ce51c73 5706488 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 99c2018a9b93314d865087f18d713a9bd1e932ea 1010104 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_riscv64.udeb 75fa1d345d2544109cf91aed70fdf1c85e033ae5 3812284 xserver-xorg-core_21.1.16-1.3+deb13u4_riscv64.deb a71e02e252d6f1f7c9895ced0f9be1e07b371ba9 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_riscv64.deb 51f91cb5266525d91420365370cd7d537384cc14 9572 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb b9573826785270f3b5fbe3f6eb2f75be7a9f5c1a 2415464 xserver-xorg-legacy_21.1.16-1.3+deb13u4_riscv64.deb 552cda17f0a7ec3da0d4ac630dcd41980d7c12ba 3279852 xvfb-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb dd531400b136df622b41f86bf34148dc48c6437f 3241920 xvfb_21.1.16-1.3+deb13u4_riscv64.deb Checksums-Sha256: c1475f59797144f6725d63120cdd63c1d46c988edeaae7aa980051e9a898577c 2686452 xnest-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb f6ee8e75d74fd5ac69428a325d904f08e65aa984b250355f942c6ef5fd008f26 3092684 xnest_21.1.16-1.3+deb13u4_riscv64.deb 754c782bdaf4ed36ad1431d65083a204daf5022fc1d33ab459bbdd875005e404 14994 xorg-server_21.1.16-1.3+deb13u4_riscv64-buildd.buildinfo cf3f4d25b9dd74024d4c05b92999208054ed516e41c05ac51936713aa66b6ac5 3936064 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb a54d19917a369d179b6d6c5ebf2fe0cb0fffaec77c1c92a495efbbbe97e92b2e 3382168 xserver-xephyr_21.1.16-1.3+deb13u4_riscv64.deb 6861b53b78307818bf436f954a5eabadb9a829d61ba12cd78e3201789ca1a1d8 5706488 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 4d6c5f11dc88723a7036f7318b4b390cca455f45230baba2d0c411b70ef2914f 1010104 xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_riscv64.udeb 7c9587c79e5136bc3b04f9a1234751566186ecfe66725a17e14080ad92826327 3812284 xserver-xorg-core_21.1.16-1.3+deb13u4_riscv64.deb 01abe03b24da09136c5485caaaa8dab9d32619155f5bb8d9ce168579f1189e46 2581764 xserver-xorg-dev_21.1.16-1.3+deb13u4_riscv64.deb 2e2a5459ead6b263bcc125a18af5174f335987e497bc6309bab9449e4e27aefe 9572 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 6fceb6c5d850d33758fe5ff5154b007bb55be90146d687e77a720f8c9e08d951 2415464 xserver-xorg-legacy_21.1.16-1.3+deb13u4_riscv64.deb d843cd44f99075f7b84f90bf189752a05b940510c31d44fbe20fd0925b8408a4 3279852 xvfb-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 18748f69b3ce9ad5da24e52414930b2760780de485e9769b57454ad53d362103 3241920 xvfb_21.1.16-1.3+deb13u4_riscv64.deb Files: de2c5a1344f4dc99e8b4d0c89398a686 2686452 debug optional xnest-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb bc62d66df718ebbbc74579ce54ba0217 3092684 x11 optional xnest_21.1.16-1.3+deb13u4_riscv64.deb 7d7529dda96ff2b62ac8892c6f945397 14994 x11 optional xorg-server_21.1.16-1.3+deb13u4_riscv64-buildd.buildinfo 0845a59909a16fac264ed83e58c5209f 3936064 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb b2764f3ed9bee32de1af6f12c043f2c9 3382168 x11 optional xserver-xephyr_21.1.16-1.3+deb13u4_riscv64.deb 4451de4cde56a717d42a2986bc786fe8 5706488 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb df60e7ac80d3514068a74f57d207746a 1010104 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u4_riscv64.udeb f05b963de91fd1012ca990586acb16e6 3812284 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u4_riscv64.deb e135e8052835d99ea7bfa98dd7796daa 2581764 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u4_riscv64.deb beee561660a18859738106fe3eb38fa4 9572 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 1de6fb8e6864ff1c11139b797b23dd20 2415464 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u4_riscv64.deb 0ec411124bfb15793c738c8f7a754fe2 3279852 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u4_riscv64.deb 522296dd0d760a8de0a9e086fb0f3d53 3241920 x11 optional xvfb_21.1.16-1.3+deb13u4_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXZ9jHPkg/vETgMJZlJNduPxUf2oFAmqfJiIACgkQlJNduPxU f2pg3g//c9CQvGKLX6v/yn0pqpilz+mI1r8D8JdWGiPf3KFgVPXdQ2rcP+lYJkyb SyVPUjtalFjilmOQaNELNTIMfPa/WLNay3uG+fP/UBWwCzx5GpgoKmegsO+A3gu2 9PpC0uj/j6RNUtPrkjsn8asiyGb5xf4hDDXOsJSARMMl4D6wXhA2scTiX9iMAVHl qLjcGCeNMgOtEYh14bHat9cLmnKEDZLEgJj5rl2dxjA6gzpmtbiHlFT23v9Xt28z d72nB2diDajwoOqEVLZrLe6l7RABK+5XE7FC06TycX88D5CmkpntSo53WErM/vz8 u3I6aA/AC29FMw1OtisSYcDusn2LooQ7zT9pm1BkEe9zErDwD/gdgmBCBTQtHcvc GK0C3qj+7hXzn2f6nYFSI09pk/VQmi6P8P4D7BH2KGHWOiF6ux+MnP9fOcOAhQ3l YMVjgLsyfgSRzx26VqfAVApxIiM/Gs8gSLY+qta/ZgvLmxPSSCCAQG4EvRfBD1M9 DTIFhnboxPnBzEEzFUmPqtFppA6ixMlv5g8AQkFih28W+hXyd2raq+kBQBYPkPBh 48D+ccl1/2MZM8mwE99A/qTE+v58RA8II1Dh9/PhJAoYI2yUv+RYK8/tb3AyraPl r29USaywM1fvbyTDXrnv32ASPb758pxYMwHsTwOdo4lx6M5LFcw= =kFql -----END PGP SIGNATURE-----