From: ftpmaster@ftp-master.debian.org   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Mon, 27 Oct 2025 18:03:26 +0100   
   Source: xorg-server   
   Architecture: source   
   Version: 2:21.1.16-1.3+deb13u1   
   Distribution: trixie-security   
   Urgency: high   
   Maintainer: Debian X Strike Force    
   Changed-By: Salvatore Bonaccorso    
   Changes:   
    xorg-server (2:21.1.16-1.3+deb13u1) trixie-security; urgency=high   
    .   
      * Non-maintainer upload by the Security Team.   
      * present: Fix use-after-free in present_create_notifies() (CVE-2025-62229)   
      * xkb: Make the RT_XKBCLIENT resource private (CVE-2025-62230)   
      * xkb: Free the XKB resource when freeing XkbInterest (CVE-2025-62230)   
      * xkb: Prevent overflow in XkbSetCompatMap() (CVE-2025-62231)   
   Checksums-Sha1:   
    e7e3e0526f93511688da4737e2c3aea675b9c0e5 4236 xorg-server_21.1.   
   6-1.3+deb13u1.dsc   
    a12d7fb7ef065cc2e2877f7b8e7bf054b41c0c44 8954623 xorg-server_21   
   1.16.orig.tar.gz   
    93beb0e73243904bb5062d0939c8be717c4b1395 188440 xorg-server_21.   
   .16-1.3+deb13u1.diff.gz   
    955b6d1ca6344f6a2706ef18ae3c6c84181d05d4 8310 xorg-server_21.1.   
   6-1.3+deb13u1_source.buildinfo   
   Checksums-Sha256:   
    18968a6b04e20aabed3fb4c9c52e946dd3b5f2165d7e49df30fe95e4a21cf0fa 4236   
   xorg-server_21.1.16-1.3+deb13u1.dsc   
    59fa52b63f6f8747ee2c4716decb29ced249c4c574e2a18c96b7d3b1420f7fd9 8954623   
   xorg-server_21.1.16.orig.tar.gz   
    8c736bbcb96ae3149d3bad8b742a24f2f4ef2961b22ba19aa380dbca58b1380f 188440   
   xorg-server_21.1.16-1.3+deb13u1.diff.gz   
    4163643dd9033a4168c36d936df91d50547fe729e979a24f51d50e648d858538 8310   
   xorg-server_21.1.16-1.3+deb13u1_source.buildinfo   
   Files:   
    3b18424535b26f3b17a21fb9576a9356 4236 x11 optional xorg-server_   
   1.1.16-1.3+deb13u1.dsc   
    4c220da8d47467a2cb555c437466fd81 8954623 x11 optional xorg-serv   
   r_21.1.16.orig.tar.gz   
    b3b1a5708c00214aa23f7f9c01e1fde4 188440 x11 optional xorg-serve   
   _21.1.16-1.3+deb13u1.diff.gz   
    ad3fad749244f20fc60de32b6375219d 8310 x11 optional xorg-server_   
   1.1.16-1.3+deb13u1_source.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmj/0CZfFIAAAAAALgAo   
   aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2   
   NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk   
   ZWJpYW4ub3JnAAoJEAVMuPMTQ89EpCkP/00/rs5NYAXLAEodCXSoOwvO+/Jz8AMH   
   GC2APw+srKk2YuRHowCyzUay37+yFOzIkKiC2BSv2ihSCKCwwX3PCA1IT/F7s8y+   
   wPXQjnJKA/E5ZCSuwkhqmOME3tCybD6qm/tjvEuLaUK3P0cBOCxARVpCg+NIUXBe   
   1Va1Q2Kx3nulNndyJ46ZO8KoI8lp6lFI281N77txH9AvjIblMi74U+4WdlAUkHoq   
   tS5U3OJ2RlXVWVhHzf0zDzLcM/sInDmIOcsGHRSk1b4TkTigHuqDYNW0cVadA4KU   
   Ul8IipSYffsYJHHQZgjUwvARE+Dd/xrfOttj0o0N71Xod4OCT0YBjVWlxg9d0Bxw   
   qPBd8863hVs0sPlUb4CrQg2X475MKHtzSLaYJrtbcJ7Ge3sHpKecksfGlc6a9TWJ   
   rVvKMMqDO3Sqva3MMpnFNQejUjzVFHPRSg3Qr3Q1bGwTbu8kj33q1P401JAHueUZ   
   PoFM/xHwXSno79zPVw8hyC9pd0Bcy1cBJdjvxGO5+JV0vteMh6tkPVshAKP21pWc   
   ct5kfPEw8uTBaYJo5O6R+H6GTBOb1RB3VwvMl2HpCbFS4JSiCr+nb/Vl/lNipDdJ   
   FkjRzKieNm7OLmzjsoRVok7IzY6jLBpM3T3RHhWULrxnx+Seq6P3qud7v7hPmjG8   
   4kQURBFwN+Nk   
   =u5q/   
   -----END PGP SIGNATURE-----   
      
      
   --============== 48801823633030310=Content-Type: application/pgp-signature   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaQKWPAAKCRCb9qggYcy5   
   IUEBAQCeXk/aoiaJi/INkQOJNreNScDOJNT1xK/M3wNENTTS9wEA/g9MH7KLcMto   
   84yPSRhphcLc8WDvmD8lPpra8WNlgA0=mx6s   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)