-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Oct 2025 18:17:17 +0100 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: amd64 Version: 2:21.1.7-3+deb12u11 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.7-3+deb12u11) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229) * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230) * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230) * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231) Checksums-Sha1: bff1a8628750b8c016d529c60730a751dc25ed07 2682152 xnest-dbgsym_21.1.7-3+deb12u11_amd64.deb 064dd58c6d9063cd58587e9292206f0ee477fc72 3013860 xnest_21.1.7-3+deb12u11_amd64.deb 63dc9473053a2c483061df6bcbab4aa7b644e230 14914 xorg-server_21.1.7-3+deb12u11_amd64-buildd.buildinfo a0ad5243931d77c373825ee63c9cd9b1db282a5e 3957456 xserver-xephyr-dbgsym_21.1.7-3+deb12u11_amd64.deb d8cbc6e0523c1fbbb7800f08d522c06bc518d702 3294036 xserver-xephyr_21.1.7-3+deb12u11_amd64.deb dc8be9b4f502db48d966754aaf8d98a4f9fda98e 5803716 xserver-xorg-core-dbgsym_21.1.7-3+deb12u11_amd64.deb d94086914b836b0fbf577f7a243f7cd32f6ae3b2 973624 xserver-xorg-core-udeb_21.1.7-3+deb12u11_amd64.udeb 153334fa82fb355f81903fa914732be265a8fcfb 3720268 xserver-xorg-core_21.1.7-3+deb12u11_amd64.deb b052b39c32803e47b5566b54bc1d9bcde74c6655 2554832 xserver-xorg-dev_21.1.7-3+deb12u11_amd64.deb 10d26d9f7fd4f2c231dd301cb9765e37ee4a9f8a 8892 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u11_amd64.deb 5de017388808bf97d5b23bddee89359432331657 2388832 xserver-xorg-legacy_21.1.7-3+deb12u11_amd64.deb 12e2102808417f9e0be95d8ac117b6aaa420372b 3271796 xvfb-dbgsym_21.1.7-3+deb12u11_amd64.deb 4771328914bf2db82b9f4377dc5f002850ed053a 3153060 xvfb_21.1.7-3+deb12u11_amd64.deb Checksums-Sha256: db054d0797f3a05c84742e26ce803aba067a6cb87f117a143451d5a08bda9ca7 2682152 xnest-dbgsym_21.1.7-3+deb12u11_amd64.deb 312b906f526b56614edfbeed235da40962d546ab2cc891865cb6d320316e86e3 3013860 xnest_21.1.7-3+deb12u11_amd64.deb e1494c1fd5135abd4785c7b63b06b240561da1a1772d8b907fb6da16f22bde3c 14914 xorg-server_21.1.7-3+deb12u11_amd64-buildd.buildinfo 1a811ad06de681a91e5f52c663e7aee94331387610d40022d2e0b2cdeafcfda3 3957456 xserver-xephyr-dbgsym_21.1.7-3+deb12u11_amd64.deb 38723d9e937b1d57dd8737231c54e3bce8f24c4a16f4a268d2392692aa36d35c 3294036 xserver-xephyr_21.1.7-3+deb12u11_amd64.deb 3ddc3e52ac98c7a11446ac8c24f017d4a6c46510915d7f67cff95442d77f55d0 5803716 xserver-xorg-core-dbgsym_21.1.7-3+deb12u11_amd64.deb bb5b8cbd4bbfb8536a51c221ee78b6bff7aa1fb6c9e1b87049218345ad9e6faf 973624 xserver-xorg-core-udeb_21.1.7-3+deb12u11_amd64.udeb 8da344b8b0277070a179e59c3065c1fdb412ff1cadf66f1f7eacc267d93f5217 3720268 xserver-xorg-core_21.1.7-3+deb12u11_amd64.deb 5602a610b83a2342b270cec1034eb9393378d883db1e4e7ebfa92dab4cdaf6f4 2554832 xserver-xorg-dev_21.1.7-3+deb12u11_amd64.deb 7c6b9228a18d0010ea13ceb620fa59a0d40515b06ca45a9f7f3d48c362888384 8892 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u11_amd64.deb a2e764643453dc9de30ae38390c0df5a63fd76ef887c5d7fa26af59dcf83642d 2388832 xserver-xorg-legacy_21.1.7-3+deb12u11_amd64.deb 5875b9ff50b919521aa170e3a07b2ffd9f4ea2702a09ebbebb3a7046921fded2 3271796 xvfb-dbgsym_21.1.7-3+deb12u11_amd64.deb c34d16e20b93cc743489ecfa3c32dda4f3ce3d7e5e4f49c1b937e96b1d73c9d3 3153060 xvfb_21.1.7-3+deb12u11_amd64.deb Files: 6fefc88c34debcc367758d7c655a211f 2682152 debug optional xnest-dbgsym_21.1.7-3+deb12u11_amd64.deb 90f768677922224783ae29a47f04f7a9 3013860 x11 optional xnest_21.1.7-3+deb12u11_amd64.deb c3f33a92b258e7a525e5a54eb572e6f0 14914 x11 optional xorg-server_21.1.7-3+deb12u11_amd64-buildd.buildinfo f33e3280fbb4a2cc739fd2a8fa3877e7 3957456 debug optional xserver-xephyr-dbgsym_21.1.7-3+deb12u11_amd64.deb c8ad10bc3ba89aee4f2e15c7074ba311 3294036 x11 optional xserver-xephyr_21.1.7-3+deb12u11_amd64.deb 98b17bcaa8b7e5e650b100ad1bff68a9 5803716 debug optional xserver-xorg-core-dbgsym_21.1.7-3+deb12u11_amd64.deb c23fa4c57091ab6ab3f9783fa0f4c578 973624 debian-installer optional xserver-xorg-core-udeb_21.1.7-3+deb12u11_amd64.udeb 752bac524bfff6d39a05cee8e43235e8 3720268 x11 optional xserver-xorg-core_21.1.7-3+deb12u11_amd64.deb 7f9292eb05d2542c1eea227a884509cc 2554832 x11 optional xserver-xorg-dev_21.1.7-3+deb12u11_amd64.deb 2ddef4a3e76d02804718d1039bf91cc7 8892 debug optional xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u11_amd64.deb 11183f5fc94224c28e1ba0958d5062e5 2388832 x11 optional xserver-xorg-legacy_21.1.7-3+deb12u11_amd64.deb 1cfa23834c26f2639263846872adb537 3271796 debug optional xvfb-dbgsym_21.1.7-3+deb12u11_amd64.deb 45e5aa00eae07a0ea258565713008baa 3153060 x11 optional xvfb_21.1.7-3+deb12u11_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEaPzFtKPtF0JrKPV5iZlfn74WV6kFAmj/1CEACgkQiZlfn74W V6l/3hAArZ4eoA20Ynq8ou3qDypKNT0cfAKCwVtcAiu8vNVn/YhvZvOpk+EIaX5R 9MdXVFhGvbL5a9BARze2uHQwjXEmEiBqUCJ9/KmeGKt9jTeWO1Uh01Qk8P6jSjw3 kPZpklSGiIFL/pdTw0CBZAVCTs/h2b6Hf0G0KtW98/6WNlE4GTsVuQ8a9YXPmKpO euPVBofS7JtyVaT2cyLwvnMN2y6rYA0Hpv21FgFuzSFXiIxYiFCpExlAO4wHgPdb +wwVpM7sG25cSq4BJ0bjZxNABEHW8p2+RirUJNu2Z4pQvLQ0o7kGROzUNOHx5YPj +E0T/GL6kprnaV4kaxONzj+wrNxJdCzaU0n5sgmnbQdOs7sVXlqWSek3LHeaJ0XC 0v3l15yYYf8fLvRudtpESNCaqU1WKeH0ohxKCVp/qzTDQ4lrKbMIXAbiCwmNGe26 pwoIdyeZ9lYx6vzZL1BZ37KVb00dKkf7PBtWVvjIUOBTwwdowRIh2xvdpy6f77wD 4LGvYCRNJVD/WTj0qcUJxbeBlvliQESlATB90VeUDBofl9RxBUSDmaxoyb85wuBS 7CldVz8n8PN8YunHYKz2ubIEUo71mBdwH1NwjOmGgosMNvTqbqgmouztKZON60Fn 8wd+1DRRVmpJI9756DapH94veqHTTEdD+z0iqCGvEvZC+9G49fg= =hiJH -----END PGP SIGNATURE-----