-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Oct 2025 18:17:17 +0100 Source: xorg-server Binary: xnest xnest-dbgsym xserver-xephyr xserver-xephyr-dbgsym xserver-xorg-core xserver-xorg-core-dbgsym xserver-xorg-core-udeb xserver-xorg-dev xserver-xorg-legacy xserver-xorg-legacy-dbgsym xvfb xvfb-dbgsym Architecture: arm64 Version: 2:21.1.7-3+deb12u11 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Salvatore Bonaccorso Description: xnest - Nested X server xserver-xephyr - nested X server xserver-xorg-core - Xorg X server - core server xserver-xorg-core-udeb - Xorg X server - core server (udeb) xserver-xorg-dev - Xorg X server - development files xserver-xorg-legacy - setuid root Xorg server wrapper xvfb - Virtual Framebuffer 'fake' X server Changes: xorg-server (2:21.1.7-3+deb12u11) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229) * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230) * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230) * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231) Checksums-Sha1: a931ae1a454627d9c0469a3723e7fb3b8b8bc210 2643840 xnest-dbgsym_21.1.7-3+deb12u11_arm64.deb 660f798ad933c8579eff855b4d2ae4b3c8029d50 2962352 xnest_21.1.7-3+deb12u11_arm64.deb c47bb06b0f614e823305e9bb721e9d9b72a9f5a1 14985 xorg-server_21.1.7-3+deb12u11_arm64-buildd.buildinfo 02f32e602b627dce573a4aa4f275498796b50647 3881352 xserver-xephyr-dbgsym_21.1.7-3+deb12u11_arm64.deb e7c46e1794fa78c6bacb9d07c4508e891f4a933b 3205760 xserver-xephyr_21.1.7-3+deb12u11_arm64.deb 4e853b26f5cf92bd1a22e5299fb52a2330308e58 5718548 xserver-xorg-core-dbgsym_21.1.7-3+deb12u11_arm64.deb de7465cca9c45d1f364e60bf7d19de6ff84e7cb1 881348 xserver-xorg-core-udeb_21.1.7-3+deb12u11_arm64.udeb 2de6455b1b1a10038ac516f4c55656123f1fde17 3592328 xserver-xorg-core_21.1.7-3+deb12u11_arm64.deb c9eae69b1c06a58b19ce6e3e16af27c6f20ff8d4 2554832 xserver-xorg-dev_21.1.7-3+deb12u11_arm64.deb d57aae915109fcc8c8209a4aefcbe57d09221c39 9460 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u11_arm64.deb 991b39c7ebed3b553f5630ef7504e02ae67092d2 2388764 xserver-xorg-legacy_21.1.7-3+deb12u11_arm64.deb 1fe23d4abf40ccb2cd2a40ce73de4529cf13af59 3206400 xvfb-dbgsym_21.1.7-3+deb12u11_arm64.deb 9023e55f71404da743c223555aa62c00fa0ce6c3 3083120 xvfb_21.1.7-3+deb12u11_arm64.deb Checksums-Sha256: 8bf5ce33435f4dcff1538023b90f577c4af7ae3dc328ca359056eccdc250f8bb 2643840 xnest-dbgsym_21.1.7-3+deb12u11_arm64.deb e7ef95666142d2034770640c4bbfa5b52301407d4d47d04de85d23752d854555 2962352 xnest_21.1.7-3+deb12u11_arm64.deb 3816c989383f133d18c40dd2656793b0af994c493ee68325475dc00c8aff6eb9 14985 xorg-server_21.1.7-3+deb12u11_arm64-buildd.buildinfo 6edc80d68be856e34eaf4e86d34f5604fe38968fea11da00c409dc12f47cfb77 3881352 xserver-xephyr-dbgsym_21.1.7-3+deb12u11_arm64.deb d78549af1ed5ea20b59e02dc3e8d0aad4e1a981df221636921d9ea65a500b21f 3205760 xserver-xephyr_21.1.7-3+deb12u11_arm64.deb b549fcf946aba06492fd8c31648b1fa04ccb572bbcf4b637605302cf8851921b 5718548 xserver-xorg-core-dbgsym_21.1.7-3+deb12u11_arm64.deb 19473b091cce3126b1ee9be002ef450ceef8844a1a62990aa4f986a04614fa78 881348 xserver-xorg-core-udeb_21.1.7-3+deb12u11_arm64.udeb 40bbf98613e16542fe195f1ff9cecd4b9fe945fd13b27746cd3c187a508bd1e5 3592328 xserver-xorg-core_21.1.7-3+deb12u11_arm64.deb d2de747aac7d7f1a3bdceb4c3e3e5f3cf2133282340d6d6363b435af73d09c10 2554832 xserver-xorg-dev_21.1.7-3+deb12u11_arm64.deb 0230ba19231f78435afd089a3c342709282ba0dc00bd40280ed9fdb85288db52 9460 xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u11_arm64.deb a4479c7225f2e8f13ebdb0ea7dadc3362a46e0f9e0c04f776164983c5ef88e2b 2388764 xserver-xorg-legacy_21.1.7-3+deb12u11_arm64.deb b0e3eb8b20e6814803db02e8ccbfb1256c923d90782d3869fd2bbc28368cd0e9 3206400 xvfb-dbgsym_21.1.7-3+deb12u11_arm64.deb 03802df143b8b0814d51ebfbe98e6bc746536139cad579d82582783a7a5a2283 3083120 xvfb_21.1.7-3+deb12u11_arm64.deb Files: 0d30f9b8cc31da26ea3c0e76fbdf809f 2643840 debug optional xnest-dbgsym_21.1.7-3+deb12u11_arm64.deb e37bd5c9cc36704a7293bca205594c8e 2962352 x11 optional xnest_21.1.7-3+deb12u11_arm64.deb 47d70c24c6f4592c5f6dc8011f81c4fa 14985 x11 optional xorg-server_21.1.7-3+deb12u11_arm64-buildd.buildinfo 54f246b427d64b59be444c24593163f2 3881352 debug optional xserver-xephyr-dbgsym_21.1.7-3+deb12u11_arm64.deb bea9aba6da3d476b267e90ad671948bf 3205760 x11 optional xserver-xephyr_21.1.7-3+deb12u11_arm64.deb 112099d55fe6c670b73dab0dbf3718f9 5718548 debug optional xserver-xorg-core-dbgsym_21.1.7-3+deb12u11_arm64.deb 487643e130025e35fcf7e34e0944b66d 881348 debian-installer optional xserver-xorg-core-udeb_21.1.7-3+deb12u11_arm64.udeb ebdd7dbc7f6fb34e5b8bdbf584a0e704 3592328 x11 optional xserver-xorg-core_21.1.7-3+deb12u11_arm64.deb fa5ce2677a55e6c2197797421dcd1c0d 2554832 x11 optional xserver-xorg-dev_21.1.7-3+deb12u11_arm64.deb d00067243721d5a7d9a6034e8fba7622 9460 debug optional xserver-xorg-legacy-dbgsym_21.1.7-3+deb12u11_arm64.deb 2d5b1ecd561bac34a0e67439d2b18284 2388764 x11 optional xserver-xorg-legacy_21.1.7-3+deb12u11_arm64.deb b4291683ef9e3c15efce41916dc4b24f 3206400 debug optional xvfb-dbgsym_21.1.7-3+deb12u11_arm64.deb 333b20ffacae9c89b03f5509119dbf6a 3083120 x11 optional xvfb_21.1.7-3+deb12u11_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmj/1CAACgkQCr/D/stJ kDynsRAAkiueWtQwv64nF0axGenvifM/gITGT7sA4tsNdSGPzS5Ifa4lTokVTlR9 nBxJ6wTQRqq5wElv7ih00FpCa5ItTD+haDodZ2DD5XPh+ER6SnJKsfy/07APSJxo jMQzG/qSd+b31EpSIBFJhyZSNMIOPoGoGiETV4w/I0/rS66qASUmkFHhXWyaxRGj +SImY5FRYtLBVT183vw1Uarqn87QoGCJmATCykVUPOlCfeTgabt9q08FJZoupSxz 7MgPfbxLbv3dELiTDFCTXU+4n4GHh/pRGtzocmGOf6x9KP7SCOZKmlE/yBqYPgFc HeFdkIzcEqjNu09MxRFs8WLdw4gsT4tLkt67CxTZLAkzkYz7ZwrMBLmRxeYKBFWl 70Cu0otDOUzxSC3EovNafZVpoNQEe/j1D4z5QYcfmPCw+dJniCU/GzwJ6iw4F+bH 6hHg7e0yFVCimmGYEelIIhiS0B21AEpAx3Ym/kkQuJ0vgainhEh/fsQA57uddk47 GJb+Kr5QUXjJYDMvvl+3hbl+5HbHGRSen91kCpfq3scLuqoumvAr0i6V0XmJE1PO PWotZ4mJU52QGoSj7fOheWo0rtDDdfGae9gcMx00NkNbPCbkKl1wWEyBAbWEQqRS hMEs9tq3UlDhcSNesTpsxAllf66aCKBKvTbX0y/mAppNs1NS2YA= =t7hA -----END PGP SIGNATURE-----