-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Oct 2025 18:03:26 +0100 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: amd64 Version: 2:21.1.16-1.3+deb13u1 Distribution: trixie-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.16-1.3+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229) * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230) * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230) * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231) Checksums-Sha1: 45653cb5b0f97263feaf03c641d5ad932c151d7a 2738072 xnest-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 999c6a0d96a8d4cbd0085acd13ae36ac8e2700d3 3050668 xnest_21.1.16-1.3+deb13u1_amd64.deb 086b87658e1319b3714b71ef03914fe3ba9572dd 14729 xorg-server_21.1.16-1.3+deb13u1_amd64-buildd.buildinfo 4326feda369cd33383dcf29d4267b411573ad41b 4039540 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u1_amd64.deb c9cf6f5774d202e75517d16bae28df86c8c5638e 3342520 xserver-xephyr_21.1.16-1.3+deb13u1_amd64.deb 107eebf1c02543673ed8347ad7b51c741fba4887 5921208 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u1_amd64.deb c8886bf52e50441f35139b2217670fb89367710d 994452 xserver-xorg-core-udeb_21.1.16-1.3+deb13u1_amd64.udeb 2d3ee5f6dc0e6037f8e32b112fc2a906b9e81cd4 3776796 xserver-xorg-core_21.1.16-1.3+deb13u1_amd64.deb 7ed090dee8f8119cc4e2d77a29274afe41162d7c 2580936 xserver-xorg-dev_21.1.16-1.3+deb13u1_amd64.deb 5abd5310eb2fc48a6fc7487c06254683381fc762 9068 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 81ef58ca40ec8407dda0aa0ba131758929ae6656 2414976 xserver-xorg-legacy_21.1.16-1.3+deb13u1_amd64.deb d72e7ad5c68c655cef790d63d7194be29f151c55 3352716 xvfb-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 6b2d2f1901bc6fad6fb5b513ec490e7d5d4b7c6e 3197328 xvfb_21.1.16-1.3+deb13u1_amd64.deb Checksums-Sha256: 68c0755573db86b134e2f84997981f7b1ec211d854fe601053349b56a972333e 2738072 xnest-dbgsym_21.1.16-1.3+deb13u1_amd64.deb e8eaf611961a1694d1ca104da6ebe50df1409e68eee102afe831308dbb943803 3050668 xnest_21.1.16-1.3+deb13u1_amd64.deb dab9b04bdd2bef41636437ef517100f336cb4d849b49beb7bb83a602fddd4469 14729 xorg-server_21.1.16-1.3+deb13u1_amd64-buildd.buildinfo 41189de32b90456182bc1363cc5d7b87c2740d626f6a52874c284b0a564dfd9a 4039540 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 2c2c467b5029206ed8a017fab60dec0b7072d68b44595818ad87fe6694d2ec6c 3342520 xserver-xephyr_21.1.16-1.3+deb13u1_amd64.deb acca69b1cccb68e3da8449ed4fe81b6c699f2c45e6f984541732716337f9db5d 5921208 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 695513c9c67e5fb242321561383da97f1060626b70c6a67cf87989f063e5f930 994452 xserver-xorg-core-udeb_21.1.16-1.3+deb13u1_amd64.udeb 463c5923a7656f2574233f47c91192d5b7ce118224ce2d04b626570bce0b627a 3776796 xserver-xorg-core_21.1.16-1.3+deb13u1_amd64.deb c44ee047d269e205dc7d16a39d3dc479667000c568e84766e99e87382fa52db7 2580936 xserver-xorg-dev_21.1.16-1.3+deb13u1_amd64.deb a924504ae7f9331532a2ed94a5e1a1882842347baca2cb24075bf020029cb567 9068 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 3ea73af75afa4c47dab158f3ace318ce65125b8517726794f2e72d24145dd096 2414976 xserver-xorg-legacy_21.1.16-1.3+deb13u1_amd64.deb fcb6192308e08efa7bd9da74772071273285706e913c4fa78b6c4295f20238d9 3352716 xvfb-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 47b12f2fe2c7af9f9a61600491597d6b06caabd55be2f1704b821f5d3f630de7 3197328 xvfb_21.1.16-1.3+deb13u1_amd64.deb Files: 29cbf4151b2755c58a8f37188460dfaa 2738072 debug optional xnest-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 914ceb01f714d9e333576cef6d0950bd 3050668 x11 optional xnest_21.1.16-1.3+deb13u1_amd64.deb f2d7f5a3e5deefcab8bbb20d83f9c5e3 14729 x11 optional xorg-server_21.1.16-1.3+deb13u1_amd64-buildd.buildinfo e2520bc1e70d742c5f2e5bfccb4c6179 4039540 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 453ad3e0143325348917f63a444fcff5 3342520 x11 optional xserver-xephyr_21.1.16-1.3+deb13u1_amd64.deb 77ec0e04dd6005f0fba4f33f1c46e40e 5921208 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u1_amd64.deb f646da382d6cc1eeee2218b458cd57fe 994452 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u1_amd64.udeb 8a3f4678c977c6c09a396915f4955218 3776796 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u1_amd64.deb e8f555e643ebee08e9bb682c40046978 2580936 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u1_amd64.deb fdf0696ec6d603a9e617cc51f9bb654e 9068 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u1_amd64.deb f558ecb884614d45ef02dc9c9db69b14 2414976 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u1_amd64.deb 5b36347c04a30695b8240d943037bf41 3352716 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u1_amd64.deb 6d741d142128a1a84c8b15fd7782dc01 3197328 x11 optional xvfb_21.1.16-1.3+deb13u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmj/1EcACgkQIy3Pg040 HrAYLA/8CjF61VeBM6rSUKgZIMFY2UJU9W99V8e57rK5DeeqYuEcv7hrvmnqnn3a qOkFXhlR+SKO41e0JuVANF63/APQQ2ex+/LdHcIQvVDEjscVeMmHNC+tkiQKO+4+ ZT9G8atxydz4RkFI1kBhRzzninJ6+XVnPHt5uhyODCCWeObshT6A6bz6+SFV0Ouf vv6vyI47Bi9zxqpvbf0kqzFHir8bO+RVkr657aprLYnf8Fa04t7KcG0Vgoy+R2jd +rlc9EkdxfolroeWKEBtAO/2rCPivxs1nsgbTc8qbfR11bbdOMPr51mJG+tooWTV hC1CU4Yvhn0/M6w4Dh7kyWF7HOtDnl9lKq+CUgiiah/K/65ZE0HA5JI3VpZjbKfJ jMd7/NOD47KoYDUCd4N9fsuuqinmaqBY/Dp1oCGyt6CUqAdZopTE4zBUuekE0qQ8 YHjotWKVWG0oahhoNMn35GP8C7cm2i7I1mx67gOPE3MUOA/w4ZDpgaEuveW+Iesd pmTKPuS2So1986BZnsl71WRS1qnPat72Z4qC95jQpXqDgo+SwDu0x5xTKI3T+VVN AY1UcQLI4pQ5CHnyTlOgBFaosKeXLAmjZ8pH6v7rFlIiXfFpLn/FaPr4cLSmTgvt PWNX0WGlLlKI9WwutGbk1K6HZ9EIaDZw8nb6rK95Rs7l4paR+Bg= =cr05 -----END PGP SIGNATURE-----