-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Oct 2025 18:03:26 +0100
Source: xorg-server
Architecture: source
Version: 2:21.1.16-1.3+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 xorg-server (2:21.1.16-1.3+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229)
   * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230)
   * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230)
   * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231)
Checksums-Sha1:
 e7e3e0526f93511688da4737e2c3aea675b9c0e5 4236 xorg-server_21.1.16-1.3+deb13u1.dsc
 a12d7fb7ef065cc2e2877f7b8e7bf054b41c0c44 8954623 xorg-server_21.1.16.orig.tar.gz
 93beb0e73243904bb5062d0939c8be717c4b1395 188440 xorg-server_21.1.16-1.3+deb13u1.diff.gz
 955b6d1ca6344f6a2706ef18ae3c6c84181d05d4 8310 xorg-server_21.1.16-1.3+deb13u1_source.buildinfo
Checksums-Sha256:
 18968a6b04e20aabed3fb4c9c52e946dd3b5f2165d7e49df30fe95e4a21cf0fa 4236 xorg-server_21.1.16-1.3+deb13u1.dsc
 59fa52b63f6f8747ee2c4716decb29ced249c4c574e2a18c96b7d3b1420f7fd9 8954623 xorg-server_21.1.16.orig.tar.gz
 8c736bbcb96ae3149d3bad8b742a24f2f4ef2961b22ba19aa380dbca58b1380f 188440 xorg-server_21.1.16-1.3+deb13u1.diff.gz
 4163643dd9033a4168c36d936df91d50547fe729e979a24f51d50e648d858538 8310 xorg-server_21.1.16-1.3+deb13u1_source.buildinfo
Files:
 3b18424535b26f3b17a21fb9576a9356 4236 x11 optional xorg-server_21.1.16-1.3+deb13u1.dsc
 4c220da8d47467a2cb555c437466fd81 8954623 x11 optional xorg-server_21.1.16.orig.tar.gz
 b3b1a5708c00214aa23f7f9c01e1fde4 188440 x11 optional xorg-server_21.1.16-1.3+deb13u1.diff.gz
 ad3fad749244f20fc60de32b6375219d 8310 x11 optional xorg-server_21.1.16-1.3+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=u5q/
-----END PGP SIGNATURE-----