-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[slackware-security]  xorg-server (SSA:2026-189-03)

New xorg-server packages are available for Slackware 15.0 and -current to
fix security issues.


Here are the details from the Slackware 15.0 ChangeLog:
+--------------------------+
patches/packages/xorg-server-1.20.14-i586-21_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
patches/packages/xorg-server-xephyr-1.20.14-i586-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xnest-1.20.14-i586-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xvfb-1.20.14-i586-21_slack15.0.txz:  Rebuilt.
patches/packages/xorg-server-xwayland-21.1.4-i586-19_slack15.0.txz:  Rebuilt.
  This update fixes security issues:
  glamor Font Atlas Heap Buffer Overflow.
  GLX contextTags Use-After-Free in CommonMakeCurrent().
  For more information, see:
    https://lists.x.org/archives/xorg/2026-July/062255.html
    https://www.cve.org/CVERecord?id=CVE-2026-55999
    https://www.cve.org/CVERecord?id=CVE-2026-56000
  (* Security fix *)
+--------------------------+


Where to find the new packages:
+-----------------------------+

Thanks to the friendly folks at the OSU Open Source Lab
(http://osuosl.org) for donating FTP and rsync hosting
to the Slackware project!  :-)

Also see the "Get Slack" section on http://slackware.com for
additional mirror sites near you.

Updated package for Slackware 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-1.20.14-i586-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xephyr-1.20.14-i586-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xnest-1.20.14-i586-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xvfb-1.20.14-i586-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/xorg-server-xwayland-21.1.4-i586-19_slack15.0.txz

Updated package for Slackware x86_64 15.0:
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-1.20.14-x86_64-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xephyr-1.20.14-x86_64-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xnest-1.20.14-x86_64-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xvfb-1.20.14-x86_64-21_slack15.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/xorg-server-xwayland-21.1.4-x86_64-19_slack15.0.txz

Updated package for Slackware -current:
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-21.1.24-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xephyr-21.1.24-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xnest-21.1.24-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xvfb-21.1.24-i686-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/x/xorg-server-xwayland-24.1.13-i686-1.txz

Updated package for Slackware x86_64 -current:
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-21.1.24-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xephyr-21.1.24-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xnest-21.1.24-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xvfb-21.1.24-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/x/xorg-server-xwayland-24.1.13-x86_64-1.txz


MD5 signatures:
+-------------+

Slackware 15.0 package:
8ee8e09c8bf7ad2f7736e0b3a34526fa  xorg-server-1.20.14-i586-21_slack15.0.txz
9445a8151fcef066aab50f6889d9020e  xorg-server-xephyr-1.20.14-i586-21_slack15.0.txz
3410bdb7f3dad90a39739ff1f6eeac31  xorg-server-xnest-1.20.14-i586-21_slack15.0.txz
478ab900a8bf22df2ef173cfdefbabbb  xorg-server-xvfb-1.20.14-i586-21_slack15.0.txz
a132025f9509f12a96a8b374ed257496  xorg-server-xwayland-21.1.4-i586-19_slack15.0.txz

Slackware x86_64 15.0 package:
1c85ac7c5d1033fc41354b33fe18bdcd  xorg-server-1.20.14-x86_64-21_slack15.0.txz
5f03471488a9b6bf826b9ab1bdc2d4c2  xorg-server-xephyr-1.20.14-x86_64-21_slack15.0.txz
4d5bc9fcf635f9bc0dccdf11da884afc  xorg-server-xnest-1.20.14-x86_64-21_slack15.0.txz
17a79b491be51e4730ae417116cc51d2  xorg-server-xvfb-1.20.14-x86_64-21_slack15.0.txz
a150bb8ba91cf5c9013602ef583cc120  xorg-server-xwayland-21.1.4-x86_64-19_slack15.0.txz

Slackware -current package:
3a6b1e86333ef9653b4982d653d5d8b7  x/xorg-server-21.1.24-i686-1.txz
17b3c4516dff4c42231a1b2eeca9fbdc  x/xorg-server-xephyr-21.1.24-i686-1.txz
c998ffd8de120deec1dcfd12117d3bbb  x/xorg-server-xnest-21.1.24-i686-1.txz
590199de49ccdb9e55bfe323996e4178  x/xorg-server-xvfb-21.1.24-i686-1.txz
d0b18dca7a226e9a606c8e199c5b0b15  x/xorg-server-xwayland-24.1.13-i686-1.txz

Slackware x86_64 -current package:
9eb2c4a86ccaff313b51b2be39d443b1  x/xorg-server-21.1.24-x86_64-1.txz
744a967005e978277b9638bf6b6b5acf  x/xorg-server-xephyr-21.1.24-x86_64-1.txz
eb49ee6f09618a0649d6e75e81499fa9  x/xorg-server-xnest-21.1.24-x86_64-1.txz
b216eac69f4f7dac6e521e4be4904171  x/xorg-server-xvfb-21.1.24-x86_64-1.txz
193b4f96655202b5002bbfbcde68975b  x/xorg-server-xwayland-24.1.13-x86_64-1.txz


Installation instructions:
+------------------------+

Upgrade the package as root:
# upgradepkg xorg-server-*.txz


+-----+

Slackware Linux Security Team
http://slackware.com/gpg-key
security@slackware.com

+------------------------------------------------------------------------+
| To leave the slackware-security mailing list:                          |
+------------------------------------------------------------------------+
| Send an email to majordomo@slackware.com with this text in the body of |
| the email message:                                                     |
|                                                                        |
|   unsubscribe slackware-security                                       |
|                                                                        |
| You will get a confirmation message back containing instructions to    |
| complete the process.  Please do not reply to this email address.      |
+------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----

iHkEARECADkWIQTsVknaQB4iq/pnNu9qRGPAQBAiMwUCak7GchsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMiwyLDIACgkQakRjwEAQIjNPrQCgjImK9MuG3UJK43sOG6UT
ekl2sD0AniRk/n9yAL1dbtY1k/p++7et/+WV
=idAW
-----END PGP SIGNATURE-----