-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Oct 2025 18:17:17 +0100 Source: xorg-server Binary: xorg-server-source xserver-common Architecture: all Version: 2:21.1.7-3+deb12u11 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Salvatore Bonaccorso Description: xorg-server-source - Xorg X server - source files xserver-common - common files used by various X servers Changes: xorg-server (2:21.1.7-3+deb12u11) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229) * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230) * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230) * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231) Checksums-Sha1: b535c136c66726523ba92fc0f8c31abbd0c8acac 7398504 xorg-server-source_21.1.7-3+deb12u11_all.deb 91c85cfdbb2d1b1e46ba0f4f75a637c29b088608 11749 xorg-server_21.1.7-3+deb12u11_all-buildd.buildinfo 67658740920bd8f929975cf87d42dc26c43a81d6 2383400 xserver-common_21.1.7-3+deb12u11_all.deb Checksums-Sha256: a6f25d96c5f661b14e12307a0ae223024e55a758d516be50d2643e579452bc2a 7398504 xorg-server-source_21.1.7-3+deb12u11_all.deb a680478082dc28316bb5d13af375e29c86c5443641f5803c314ecc80b2b6e690 11749 xorg-server_21.1.7-3+deb12u11_all-buildd.buildinfo 05915256d43697c64f3c47337a3bc4223d5eb3baa33eafdf62a5193d65702f76 2383400 xserver-common_21.1.7-3+deb12u11_all.deb Files: cc47650533d1eb83ac896a8a6cc9b46d 7398504 x11 optional xorg-server-source_21.1.7-3+deb12u11_all.deb f8ffcc940bbacd7f4df5e1c2d37818cb 11749 x11 optional xorg-server_21.1.7-3+deb12u11_all-buildd.buildinfo 80fb9a6d06553f170a700072e9c760b8 2383400 x11 optional xserver-common_21.1.7-3+deb12u11_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmj/1D0ACgkQJm69HxMT N+qbKxAAjHOOtk/wT+U02Aq9fdTFlbgkgIBpvHoVUhQoTR0kl8Wom+h55rBmE8R2 WfiAJ2Z5OOrSbrYiFWKmkYjF0BFrA7lssxfrlmDUi+aR+JUb5CtocmKNWifrxoOY eyDGKecZzLnQrRUu2BCDmHIapWp/1imd4qDMzoqkdDgJjsOI0mBImm65H7I7e9aF PxcbzHdfXdbBrIKiZZGLQ5FtkhWCDO/+Rk5FhaJGWZN4ROdAIoLw7o9xAs5I7blP Q0Q88gVMuj1uIdGxA7YX08Wcy5iZNmn11ntBSZ9yGafJgoj4yhYl8EUL1PHiD2eP qCe/yP2a+eElyno2v6h7cE+5yiJtYxssMbCvX/AHbaWyzRMXZNqV/fbR19KgR1dT 7n02DeNBdeJ6/ZhfT5lTal6KOD8gkG+mNeD/b0BMH6jbRZdXKOnd9kb6kfPyW8dn 6l9gRAMj7FrYfJQBa3l+QxTaWu3oEwDkc1dYmOlABwYlr0BtoatKKL8WVbG6Qqkt GO70fC2GTwuL3v4g5kMJmRHoFzxP0H4aiFJZv69IK/r3YNbavA5aBiqa+pweK7kC 6xXS4Jw5dy44frEuofhzFYQs5ou5TgBXdWWjlqboBNyPapHrzaclk/RkTN6YF2X6 1cGnNCEk3zmoaY7QRrTuEMaUf8x3Xivaf4AZyjHkH0uOg7ScN2k= =uuH+ -----END PGP SIGNATURE-----