From: ftpmaster@ftp-master.debian.org 
  
 -----BEGIN PGP SIGNED MESSAGE----- 
 Hash: SHA512 
  
 Format: 1.8 
 Date: Mon, 27 Oct 2025 18:03:26 +0100 
 Source: xorg-server 
 Architecture: source 
 Version: 2:21.1.16-1.3+deb13u1 
 Distribution: trixie-security 
 Urgency: high 
 Maintainer: Debian X Strike Force  
 Changed-By: Salvatore Bonaccorso  
 Changes: 
  xorg-server (2:21.1.16-1.3+deb13u1) trixie-security; urgency=high 
  . 
    * Non-maintainer upload by the Security Team. 
    * present: Fix use-after-free in present_create_notifies() (CVE-2025- 
 62229) 
    * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230) 
    * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230) 
    * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231) 
 Checksums-Sha1: 
  e7e3e0526f93511688da4737e2c3aea675b9c0e5 4236 xorg-server_21.1. 
 6-1.3+deb13u1.dsc 
  a12d7fb7ef065cc2e2877f7b8e7bf054b41c0c44 8954623 xorg-server_21 
 1.16.orig.tar.gz 
  93beb0e73243904bb5062d0939c8be717c4b1395 188440 xorg-server_21. 
 .16-1.3+deb13u1.diff.gz 
  955b6d1ca6344f6a2706ef18ae3c6c84181d05d4 8310 xorg-server_21.1. 
 6-1.3+deb13u1_source.buildinfo 
 Checksums-Sha256: 
  18968a6b04e20aabed3fb4c9c52e946dd3b5f2165d7e49df30fe95e4a21cf0fa 4236 
 xorg-server_21.1.16-1.3+deb13u1.dsc 
  59fa52b63f6f8747ee2c4716decb29ced249c4c574e2a18c96b7d3b1420f7fd9 8954623 
 xorg-server_21.1.16.orig.tar.gz 
  8c736bbcb96ae3149d3bad8b742a24f2f4ef2961b22ba19aa380dbca58b1380f 188440 
 xorg-server_21.1.16-1.3+deb13u1.diff.gz 
  4163643dd9033a4168c36d936df91d50547fe729e979a24f51d50e648d858538 8310 
 xorg-server_21.1.16-1.3+deb13u1_source.buildinfo 
 Files: 
  3b18424535b26f3b17a21fb9576a9356 4236 x11 optional xorg-server_ 
 1.1.16-1.3+deb13u1.dsc 
  4c220da8d47467a2cb555c437466fd81 8954623 x11 optional xorg-serv 
 r_21.1.16.orig.tar.gz 
  b3b1a5708c00214aa23f7f9c01e1fde4 188440 x11 optional xorg-serve 
 _21.1.16-1.3+deb13u1.diff.gz 
  ad3fad749244f20fc60de32b6375219d 8310 x11 optional xorg-server_ 
 1.1.16-1.3+deb13u1_source.buildinfo 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmj/0CZfFIAAAAAALgAo 
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 
 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk 
 ZWJpYW4ub3JnAAoJEAVMuPMTQ89EpCkP/00/rs5NYAXLAEodCXSoOwvO+/Jz8AMH 
 GC2APw+srKk2YuRHowCyzUay37+yFOzIkKiC2BSv2ihSCKCwwX3PCA1IT/F7s8y+ 
 wPXQjnJKA/E5ZCSuwkhqmOME3tCybD6qm/tjvEuLaUK3P0cBOCxARVpCg+NIUXBe 
 1Va1Q2Kx3nulNndyJ46ZO8KoI8lp6lFI281N77txH9AvjIblMi74U+4WdlAUkHoq 
 tS5U3OJ2RlXVWVhHzf0zDzLcM/sInDmIOcsGHRSk1b4TkTigHuqDYNW0cVadA4KU 
 Ul8IipSYffsYJHHQZgjUwvARE+Dd/xrfOttj0o0N71Xod4OCT0YBjVWlxg9d0Bxw 
 qPBd8863hVs0sPlUb4CrQg2X475MKHtzSLaYJrtbcJ7Ge3sHpKecksfGlc6a9TWJ 
 rVvKMMqDO3Sqva3MMpnFNQejUjzVFHPRSg3Qr3Q1bGwTbu8kj33q1P401JAHueUZ 
 PoFM/xHwXSno79zPVw8hyC9pd0Bcy1cBJdjvxGO5+JV0vteMh6tkPVshAKP21pWc 
 ct5kfPEw8uTBaYJo5O6R+H6GTBOb1RB3VwvMl2HpCbFS4JSiCr+nb/Vl/lNipDdJ 
 FkjRzKieNm7OLmzjsoRVok7IzY6jLBpM3T3RHhWULrxnx+Seq6P3qud7v7hPmjG8 
 4kQURBFwN+Nk 
 =u5q/ 
 -----END PGP SIGNATURE----- 
  
  
 --============== 48801823633030310=Content-Type: application/pgp-signature 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaQKWPAAKCRCb9qggYcy5 
 IUEBAQCeXk/aoiaJi/INkQOJNreNScDOJNT1xK/M3wNENTTS9wEA/g9MH7KLcMto 
 84yPSRhphcLc8WDvmD8lPpra8WNlgA0=mx6s 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)