-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 Apr 2026 16:59:22 +0300
Source: xorg-server
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 2:21.1.22-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Timo Aaltonen <tjaalton@debian.org>
Changes:
xorg-server (2:21.1.22-1) unstable; urgency=medium
.
* New upstream release.
- CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap()
- CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom()
- CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence()
- CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap()
- CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes()
Checksums-Sha1:
ea7663037710d19ec5b73c0ea3fea86c7cb3d3b4 3778 xorg-server_21.1.22-1.dsc
deda4dbe755637433cb2959862d51be1dbaeb84e 5593922 xorg-server_21.1.22-1.tar.gz
bcafdc2b786641a4d72f6e3b879c773df1b286fc 11917 xorg-server_21.1.22-1_source.buildinfo
Checksums-Sha256:
5f581f4acb35167fbd40e533c40d56fc140b9f97a363cc342a268e40dbe08d86 3778 xorg-server_21.1.22-1.dsc
0699514f61d2f187023e7d423ed1eb6d34f969d0de126330ff910dd9d2366b5a 5593922 xorg-server_21.1.22-1.tar.gz
017a75b108701dbac021360fc4e01a57796ea51b14128407bfab69dc66294689 11917 xorg-server_21.1.22-1_source.buildinfo
Files:
8109cc061a6fc06f2005644926d0fcb8 3778 x11 optional xorg-server_21.1.22-1.dsc
208be675d440359fb1ccfdac1ad26f06 5593922 x11 optional xorg-server_21.1.22-1.tar.gz
5ac4ba2780422330dc64151b33a9313d 11917 x11 optional xorg-server_21.1.22-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEdS3ifE3rFwGbS2Yjy3AxZaiJhNwFAmneSloACgkQy3AxZaiJ
hNwNXg//e/TYEKnVPAMiraZRcnDiK1hTPY+reMEcoh0eO35euxd/9wY8Z9Ww9usF
AcPJQg4gi/XQG8DPoAuUtzq2XOTz4Yg3r0cAIZBJLJKqJiLirzCHXDS0Pro6sCpb
dSiPIQZancaWoXygYJ5fH4M8jtPg7zi9KRC00ZxOLy4Dy8a1s3NnU0fHMO2dZ5K7
K/6nbMEaeL6LNlB732NPPTZeBDYXOh+vbBm6hmZDEVvA8qi+uOYEZWY40wZ83APK
9kAiOS6z1llzGwlqf4xW/dWwQmTcUNFNXVXP4hNzUUWq94B4vPv4YPoMZIL6VWHJ
l6yXFDo18+kqDaXljvbA9bKJxvNDzmEIABZWY0sHKaaU/s/4C6bGdRP0OmTq9l+t
xi7tw10k/roOnK+ZUY3omKbm1ybCWxvMAjzSxA0vADTLJTHzbefkTE+n02lp3xDJ
qS4WOKrkBNrPv3ifX5QHSzBaPkcCibpcZllzqmkTR79WjVi7DSRza8LWUT052FgW
zRhLVmL+JLNE15WH0zvP4ceBPh8GgaYqID6sIf+7ZxF2q9YvsG3txKbraRSHqJWx
8XEtyPJ0ks1O2fMr2UzvJL9X9YWDYXedNV5XYvVNjL1g1EKxK72wCQXecoNrBaR4
xBBfdj0+V5kgaL+RyTShGvBAdo8qyoqRKuGXD8GhLAbl2XZzkd4=
=6heT
-----END PGP SIGNATURE-----
