-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Oct 2025 18:03:26 +0100
Source: xorg-server
Binary: xorg-server-source xserver-common
Architecture: all
Version: 2:21.1.16-1.3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 xorg-server-source - Xorg X server - source files
 xserver-common - common files used by various X servers
Changes:
 xorg-server (2:21.1.16-1.3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229)
   * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230)
   * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230)
   * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231)
Checksums-Sha1:
 5cb341358d5ba8a43b9290a004eae23efbf89d29 7516392 xorg-server-source_21.1.16-1.3+deb13u1_all.deb
 55e5d4906b3ef6dd35d51b697247fc04ebc9606e 11488 xorg-server_21.1.16-1.3+deb13u1_all-buildd.buildinfo
 488c08b60977fd16c12e5a04921bfc8f8271f888 2409556 xserver-common_21.1.16-1.3+deb13u1_all.deb
Checksums-Sha256:
 04e564a1c0d8c62d1efb76e5a6362a074bfb9cf10016da845f8d4573f2c3cbc7 7516392 xorg-server-source_21.1.16-1.3+deb13u1_all.deb
 bf40460e36047b851df548eed3111c94209cda6d64e111889f017d74ea49b949 11488 xorg-server_21.1.16-1.3+deb13u1_all-buildd.buildinfo
 bc8d2422ccb93b15b12858ae49d27d8dfcc57703cb33db6f197acee718f5aac8 2409556 xserver-common_21.1.16-1.3+deb13u1_all.deb
Files:
 e65a6689baf6ad1981792c0f38f9752a 7516392 x11 optional xorg-server-source_21.1.16-1.3+deb13u1_all.deb
 0334918ecaa371fc4ccfe14ed9ea5302 11488 x11 optional xorg-server_21.1.16-1.3+deb13u1_all-buildd.buildinfo
 37e0807b544dc5a5624621a4a4d2acbb 2409556 x11 optional xserver-common_21.1.16-1.3+deb13u1_all.deb

-----BEGIN PGP SIGNATURE-----
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=OQ+0
-----END PGP SIGNATURE-----