This bug was fixed in the package xorg-server - 2:21.1.25-1ubuntu3
---------------
xorg-server (2:21.1.25-1ubuntu3) stonking; urgency=medium
* SRU upload (LP: #2170857)
* patches: Revert a commit which broke driver abi.
xorg-server (2:21.1.25-1ubuntu2) stonking; urgency=medium
* patches: Drop an upstreamed patch.
xorg-server (2:21.1.25-1ubuntu1) stonking; urgency=medium
* Merge from Debian.
xorg-server (2:21.1.25-1) unstable; urgency=medium
* Team upload.
* New upstream release.
- CVE-2026-88812: XKB SetGeometry TextDoodad Double Free
- CVE-2026-93515: Present Extension Cross-Window Notify Use-After-Free
- CVE-2026-93516: XInput Passive Grab modifierDevice Use-After-Free
- CVE-2026-93517: GLX RenderLarge Heap Buffer Overflow
- CVE-2026-93518: XKB ResizeKeyType Numeric Truncation
- CVE-2026-93519: XFixes Pointer Barrier Event List Buffer Overflow
- CVE-2026-93520: XKB ChangeKeycodeRange Heap Out-of-Bounds Write
- CVE-2026-93521: RandR ChangeProviderProperty Heap Buffer Overflow
- CVE-2026-93522: Glamor CopyArea CPU-FBO Heap Buffer Overflow
- CVE-2026-93523: XInput2 PassiveUngrabDevice Modifier Out-of-Bounds Write
- CVE-2026-93524: XKB SetMap Key Width/Action Count Desync Out-Of-Bounds
Read
- CVE-2026-93536: GestureBuildSprite Use-After-Free
* control, rules: Clean up remnants of kfreebsd.
* control, rules: Clean up remnants of powerpcspe.
-- Timo Aaltonen <[email protected]> Wed, 14 Oct 2026 18:14:06 +0300
** Changed in: xorg-server (Ubuntu)
Status: Fix Committed => Fix Released
** CVE added: https://cve.org/CVERecord?id=CVE-2026-88812
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93515
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93516
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93517
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93518
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93519
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93520
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93521
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93522
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93523
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93524
** CVE added: https://cve.org/CVERecord?id=CVE-2026-93536
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2170857
Title:
SRU upload of 21.1.25
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xorg-server/+bug/2170857/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
