-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 07 Oct 2026 12:37:53 +0300
Source: xorg-server
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 2:21.1.25-1
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Timo Aaltonen <tjaalton@debian.org>
Changes:
xorg-server (2:21.1.25-1) unstable; urgency=medium
.
* Team upload.
* New upstream release.
- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free
- CVE-2026-93515: Present Extension Cross-Window Notify Use-After-Free
- CVE-2026-93516: XInput Passive Grab modifierDevice Use-After-Free
- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow
- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation
- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow
- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write
- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow
- CVE-2026-93522: Glamor CopyArea CPU-FBO Heap Buffer Overflow
- CVE-2026-93523: XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write
- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read
- CVE-2026-93536: GestureBuildSprite Use-After-Free
* control, rules: Clean up remnants of kfreebsd.
* control, rules: Clean up remnants of powerpcspe.
Checksums-Sha1:
a7ca25c56d735bc8b8482a52da9225467c1d6d2d 4252 xorg-server_21.1.25-1.dsc
4124778fd718f15f491c23047156f497ca843748 9055649 xorg-server_21.1.25.orig.tar.gz
26a3ded1533d3039d61795599d0dc265e95e8ece 195 xorg-server_21.1.25.orig.tar.gz.asc
1e8f7c189c3293bc4b290b62712caa06dc10d73e 174496 xorg-server_21.1.25-1.diff.gz
c9d688c1030ed8313dcb59e7f14ba93dad04029f 12397 xorg-server_21.1.25-1_source.buildinfo
Checksums-Sha256:
9f2b751df4f3b9e1d2c9b0fea545a7aa5727a336845bee33035846af0fe4afa6 4252 xorg-server_21.1.25-1.dsc
fdb5ec9b4ab7371745b182b68c7054ed72fc4d13e185fc369cfc45e0c3a174e7 9055649 xorg-server_21.1.25.orig.tar.gz
6f7a1b99cfc94938397631b13a81d78a851c9d83a276c45f6850c10c363ad7aa 195 xorg-server_21.1.25.orig.tar.gz.asc
558d175d520010ad030bb937250e0c47a6cf293e507e4ea2f9622cbb3060ba68 174496 xorg-server_21.1.25-1.diff.gz
8fee3a829133990bfd0eb8a581e6f57c4aba46c5bccf1b2e4a43d276ba11418b 12397 xorg-server_21.1.25-1_source.buildinfo
Files:
86f9dc06ab7016dc1999fb9bd97e2eab 4252 x11 optional xorg-server_21.1.25-1.dsc
e9939c52e583970d908aa69228318362 9055649 x11 optional xorg-server_21.1.25.orig.tar.gz
a3ce06d0043bdc60b7ed9f9cbf315518 195 x11 optional xorg-server_21.1.25.orig.tar.gz.asc
a3f92b18816ad6342570bcaebfca413a 174496 x11 optional xorg-server_21.1.25-1.diff.gz
0b6f8e86c6e3d93d1568612711f0b530 12397 x11 optional xorg-server_21.1.25-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=ZrY4
-----END PGP SIGNATURE-----