-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 19 Oct 2025 22:03:02 +0200 Source: xorg-server Architecture: source Version: 2:1.20.11-1+deb11u17 Distribution: bullseye-security Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: xorg-server (2:1.20.11-1+deb11u17) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2025-62229 present: Fix use-after-free in present_create_notifies() * CVE-2025-62230 xkb: Make the RT_XKBCLIENT resource private xkb: Free the XKB resource when freeing XkbInterest * CVE-2025-62231 xkb: Prevent overflow in XkbSetCompatMap() Checksums-Sha1: 9021a1a5613065e9c68092cb05b8ab34551d6b9e 4661 xorg-server_1.20.11-1+deb11u17.dsc 470731401c0c828f603b6ac5b92799483bd12eff 9414572 xorg-server_1.20.11.orig.tar.gz 6ad7106cc0100c9ace53aa17f439936f1f181f6a 618 xorg-server_1.20.11.orig.tar.gz.asc c0500a30cb2f30aebb69023dab4b78f07238a8d1 206614 xorg-server_1.20.11-1+deb11u17.diff.gz Checksums-Sha256: 03990ffa987f6b8a0b2959c40c57e7bb194bd9006dab2cd6b00b8fa4cba1a1e7 4661 xorg-server_1.20.11-1+deb11u17.dsc 4e9341c96f5ed0f6b9491ed732c501303479d3fe21da280c768a1822d7e5d352 9414572 xorg-server_1.20.11.orig.tar.gz d49b58a8e9b4f06dbf2712f81c51731f47bbe6e336cd35ca0a3ad0ca0a0e8a63 618 xorg-server_1.20.11.orig.tar.gz.asc 6318d81ea310d04c24ebab66b3ed6e596b258af5c10c13a60105fe3a8cfc1385 206614 xorg-server_1.20.11-1+deb11u17.diff.gz Files: 7893ed2d8a5875a7391b52d950baa0d2 4661 x11 optional xorg-server_1.20.11-1+deb11u17.dsc 86ef76882fabf07028a95a29a3edf032 9414572 x11 optional xorg-server_1.20.11.orig.tar.gz 50e2fc26c9062360d2fdefd6688ce146 618 x11 optional xorg-server_1.20.11.orig.tar.gz.asc e67714a89d3b90459ed8b8c933d9c09f 206614 x11 optional xorg-server_1.20.11-1+deb11u17.diff.gz -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmkBzS1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR0e4EACFfNyHq3WkGi79fRO8vwKPNAj1H0M0 cuQpeFJSWdag5UmQBbCOm+rfBNWH5oXoYkv/K1EfGfSzftSRcJmnk+/+ZEvXKD1E QO3tjJM4/NSusNet+3v9uuVPF704cybULSiN4FKaBRR23TeeAIZRWp2CjW3Y9bTd t0JXgqYnZG4X1pMX2QoAv8sVbGdjmk0Xe0YmHiwLm8rsPd5YDuWfmRILN7mKMSRZ miLL4cAIp/Hq6oqwhIAfFcZqfn7VxLoFVZcmBGKCDWWRtuzPqvypbrwi+5FOUSv9 TiDGLlwul0EgLd9shYC5YrKVg5HoPxpt6gVnFm9Do7pkbCvjfLwxz0NBg7+P/b3B wDEc4QLt7831AFZXxkPT+9/FqfajYeN+wEJItg0dWb7Tf9tq+uZjJNsxKPx8mKN2 2ifZzxxEHPZRpgAZ7x/I2xMmkGormTL67jderITGPTAZgtJYUc8dc0VgKDtUeb4B pq1jv1vXc2ND30UiiqaIoaddGIaSJzOPLi7Hjz8tV4EpNZyJIUjGRtyGfrmlT/8c YPRgM7XasPAfSvvIG1sTZuC7AKKOZq50Up2kay0gmcPiCAFLUs0c2T+oZbCwoYfN LMQ8gNYPYLZGyugjDGnT8llsigdSllgQLN1DOh6T+toPZxLyvTUgMzCkBnk8yMRW 4m7lQ7sXhAmOug== =CsXY -----END PGP SIGNATURE-----