-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Apr 2026 02:48:00 +0200
Source: xorg-server
Architecture: source
Version: 2:21.1.7-3+deb12u12
Distribution: bookworm
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 xorg-server (2:21.1.7-3+deb12u12) bookworm; urgency=medium
 .
   * Non-maintainer upload.
   * xkb: fix buffer re-use in _XkbSetCompatMap (CVE-2026-33999)
   * xkb: Fix bounds check in _CheckSetGeom() (CVE-2026-34000)
   * miext/sync: Fix use-after-free in miSyncTriggerFence() (CVE-2026-34001)
   * xkb: Fix out-of-bounds read in CheckModifierMap() (CVE-2026-34002)
   * xkb: Add additional bound checking in CheckKeyTypes() (CVE-2026-34003)
   * xkb: Add more _XkbCheckRequestBounds() (CVE-2026-34003)
Checksums-Sha1:
 b71e60e794406056aec7b5cc6266fb8740c75800 4139 xorg-server_21.1.7-3+deb12u12.dsc
 b078ba087e5768e183c61f7e42afbf5b969c1f30 209709 xorg-server_21.1.7-3+deb12u12.diff.gz
 d8b0e7c6743ad94092db6c43126b863850207eae 7050 xorg-server_21.1.7-3+deb12u12_source.buildinfo
Checksums-Sha256:
 a8c0d6f3adc7491cbf9ddf6f14af768a2ee6c7a40ee2eb4cb2c9197ef2393832 4139 xorg-server_21.1.7-3+deb12u12.dsc
 273a9841c2189172305616b297a259fddf93f48380f77087328b6c832cea221c 209709 xorg-server_21.1.7-3+deb12u12.diff.gz
 0e4ec88ecf7e8a47208ca1a3571ffdb82a8e5d0a831243b4d664a584c099d0ab 7050 xorg-server_21.1.7-3+deb12u12_source.buildinfo
Files:
 1906e383452189ac13d4c47fbc375dde 4139 x11 optional xorg-server_21.1.7-3+deb12u12.dsc
 f1a006dd12db0b466b5b487ede1e17c5 209709 x11 optional xorg-server_21.1.7-3+deb12u12.diff.gz
 06538b68732d8426e46999ac4c2975ec 7050 x11 optional xorg-server_21.1.7-3+deb12u12_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=oEpn
-----END PGP SIGNATURE-----