[Deepin Integration]~[v25-Release] fix(xorg-server): CVE-2026-50256/50257/50258/50259/50260/50261/50264 security fixes by deepin-ci-robot@deepin-community/xorg-server by deepin-community-ci-bot[bot]

[deepin-bot]

Package information | 软件包信息

包名	版本
xorg-server	2:21.1.10-1deepin25

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4144/testing/ ./

Changelog | 更新信息

xorg-server (2:21.1.10-1deepin25) unstable; urgency=medium

• Security fixes:
  • CVE-2025-49177: xfixes: Check request length for SetClientDisconnectMode
  • CVE-2026-50256: Font alias stack overflow in doListFontsAndAliases
  • CVE-2026-50257: XKB mapWidths stack out-of-bounds write in CheckKeyTypes
  • CVE-2026-50258: XKB num_levels stack overflow in CheckKeyTypes
  • CVE-2026-50259: ScreenSaver use-after-free in CreateSaverWindow
  • CVE-2026-50260: SYNC use-after-free in SyncChangeCounter
  • CVE-2026-50261: SYNC use-after-free in FreeCounter/miSyncDestroyFence
  • CVE-2026-50264: GLX out-of-bounds read/write in ChangeDrawableAttributes

[deepin-bot]

Integration Test Info

Test suggestion | 测试建议

Influence | 影响范围

ADDITIONAL INFORMATION | 额外补充

[deepin-bot]

IntegrationProjector Notify the author
@deepin: Integrated issue updated

[deepin-bot]

IntegrationProjector Bot
Deepin Testing Integration Project Manager Info
Link to deepin-community/Repository-Integration#4144