-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Oct 2025 18:03:26 +0100 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: riscv64 Version: 2:21.1.16-1.3+deb13u1 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-osuosl-02) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.16-1.3+deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229) * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230) * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230) * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231) Checksums-Sha1: fb3897b3d83307335befea384f284e4281cfe7ee 2684064 xnest-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb e8c6dd46ae5e0549d5eb2be1178e2360333829e5 3091152 xnest_21.1.16-1.3+deb13u1_riscv64.deb 5f8b328033a66a1f3ef23aedbc9420b9de074e0c 14653 xorg-server_21.1.16-1.3+deb13u1_riscv64-buildd.buildinfo 93eb18ea5046deedec07f11710584ac136291477 3934480 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb e2c7a93f6b26b236818cbc7187e06719f1b7e6ad 3380108 xserver-xephyr_21.1.16-1.3+deb13u1_riscv64.deb db55863576d7c45f4755581d0ca6bdda012947d1 5707240 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 2caba941e37b4ef020f3b268e9406d1b95bf9678 1009640 xserver-xorg-core-udeb_21.1.16-1.3+deb13u1_riscv64.udeb 0b9d5b16471d154d4d923b0e74df4cbe407f9ef1 3810948 xserver-xorg-core_21.1.16-1.3+deb13u1_riscv64.deb 4b79d133b82733ef0374ebfa47a2d22de9a4ca04 2580928 xserver-xorg-dev_21.1.16-1.3+deb13u1_riscv64.deb 481ad0204b6ba1b0cfea61f0d5b1db6424bef694 9576 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 35c65ce966cdb2c7ef01524ea556f7335e93625d 2414764 xserver-xorg-legacy_21.1.16-1.3+deb13u1_riscv64.deb ff682f9d381b1d3fa9ae13d3b1ebd0052889a89c 3280900 xvfb-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 310c63b71058da2bc5af80f0f3249bc3f696fbfa 3240104 xvfb_21.1.16-1.3+deb13u1_riscv64.deb Checksums-Sha256: a9799ee083bb28d8e2f9a89cd8457888ea7c6a214cd8bf1316c151b8dac4ffcb 2684064 xnest-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 0817c32d9f654139ded4429ec7cfea9b6a38e747fae469f880352c07919cb0c0 3091152 xnest_21.1.16-1.3+deb13u1_riscv64.deb 0476cf8132709ddc7db1c2cb9e95288433d5f503c0ebbff51cc16b3fe997c45e 14653 xorg-server_21.1.16-1.3+deb13u1_riscv64-buildd.buildinfo ae6fde1d6529d1bef046d664d37511ff402c7323a71e1ace8455f6fbba2ce8ba 3934480 xserver-xephyr-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb bb9df0408d9e5768af6668b2a676c8c48566e0e1ba76cf86576862b56315c21d 3380108 xserver-xephyr_21.1.16-1.3+deb13u1_riscv64.deb caf83525237a4901ad182b307e080c777bee1ae595d486edf413074654dcc9c6 5707240 xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 34b40645359d4764cc92f1df4e8e168c879e0320ef16ab6ab29d7a708019e5c3 1009640 xserver-xorg-core-udeb_21.1.16-1.3+deb13u1_riscv64.udeb 76142923fe640c27ed4b0ea4dc7642ac7b0b8f7a84aedf61ddf3b9d8eff1c7ef 3810948 xserver-xorg-core_21.1.16-1.3+deb13u1_riscv64.deb 4264d1f0fe2845867b98fa6c92f908ee481ac01a7bbd3a299933d12280ce4db3 2580928 xserver-xorg-dev_21.1.16-1.3+deb13u1_riscv64.deb c098d31c2f5eccab4d3fcbbd6b6b47bc11a0414c2b57d08319d5434aed16b378 9576 xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 21ac77613259d1bd379362853869de4c54a5d2fb1d3afa6924c4702c4f15ba53 2414764 xserver-xorg-legacy_21.1.16-1.3+deb13u1_riscv64.deb af9229d4181a9660fcd73c717728753fa2f173e3fe5672fed6f731b8c7ff29a1 3280900 xvfb-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 4e0bccb26a9c34203c5c1b4f967f973d27049f512af2b6924581a222c5179da5 3240104 xvfb_21.1.16-1.3+deb13u1_riscv64.deb Files: 106bfc9e5fa2a7b28a8601865d724646 2684064 debug optional xnest-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 9c7e82e3e05912fb501abfb0a519e2bf 3091152 x11 optional xnest_21.1.16-1.3+deb13u1_riscv64.deb 32578d25bc3ec29d57912892609661fa 14653 x11 optional xorg-server_21.1.16-1.3+deb13u1_riscv64-buildd.buildinfo fc096788b217cf56573e439a37bc3320 3934480 debug optional xserver-xephyr-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 0d0e877f571300d17559438bf612da93 3380108 x11 optional xserver-xephyr_21.1.16-1.3+deb13u1_riscv64.deb 87efa3795b26a2661b71c4ca37b2c928 5707240 debug optional xserver-xorg-core-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb c58d2545d2f0a9c1e416415e789b080f 1009640 debian-installer optional xserver-xorg-core-udeb_21.1.16-1.3+deb13u1_riscv64.udeb 6c8c4f00b39252a75067186045b80238 3810948 x11 optional xserver-xorg-core_21.1.16-1.3+deb13u1_riscv64.deb 794d40f7d66698fbbd296f4162ef76c3 2580928 x11 optional xserver-xorg-dev_21.1.16-1.3+deb13u1_riscv64.deb 228e94295e04adf45ec71a63ff87a04d 9576 debug optional xserver-xorg-legacy-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 1764dffe129c7b688c3f0a2c212182b9 2414764 x11 optional xserver-xorg-legacy_21.1.16-1.3+deb13u1_riscv64.deb dcc8b8e7dda9bf1e064c47a731419db5 3280900 debug optional xvfb-dbgsym_21.1.16-1.3+deb13u1_riscv64.deb 3c6b381562c8e464b81707e4645d4a07 3240104 x11 optional xvfb_21.1.16-1.3+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8KVeqNwdhjrwBuds9GqgrNxgH+IFAmj/5jkACgkQ9GqgrNxg H+LCwhAAgI30HpB7vkBA15h3LkTZeGe1bfugl2E0evN0jsIZNk+MwqgIqhm2iWxG CL+960Qgz6lz9KfKDmFcJDP5v3a9OOebD3f0fl/TGJ3IHkWUV6zA2PjC8omKlHrS X77553FgcBFKHQimctkoh+tRHWeG5XpZZp1NXo5vjjryrm1+qbN0dQ02UnvtLMjV ETY1nmSDYLU/7rKfP11OFKXCJpHd6z4x7mE5UNrgc5czYm6l7RcJ6WP2+Dcq+CbS CcrQ2wKS3jMUxmi0HokcZ02y+zVKbmlR5MKgaovAtJeVFaenuKTQ+G/7tQ2IYjPN C8WVltPHyQ3hcgtIYVgaMEGkhVDZyW0yKcbsvmiXOPTLDduOljcUMQrTeUrbOlBM 41ncD37PCEJQ+rypaLBKm0GfzIre2x9KbfGG6ug9pme2T9cHwrSmSm+0f7PfVemH +0+ja4jZ6Vm7q7BBz3div9fv4YEuA7XCQu45tpGNY7HmRutU/KQ3p3W+iYXznRoo RJAkyH/sHvNascA5321k/ECXgTG4tAmQDaa8QJB8tsrsO7PFoKw8QzqD8CBVVaSV ox2yrXPvT42YYeq0z2fjPPDFW/IJvjydq9FhUutzrYIUZ28XKAk9ebeIIKs85jkl qTmJ+4nq191B1Ywb2peBP230uZQks/GOEAm+9GYq+Th9anAfH8M= =FSOk -----END PGP SIGNATURE-----