-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 29 Oct 2025 11:09:04 +0100 Source: xorg-server Built-For-Profiles: noudeb pkg.linux.nosource pkg.linux.nokerneldbg pkg.linux.nokerneldbginfo Architecture: source Version: 2:21.1.20-1 Distribution: unstable Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Closes: 1119267 Changes: xorg-server (2:21.1.20-1) unstable; urgency=medium . * New upstream release. (Closes: #1119267) * CVE-2025-62229: Use-after-free in XPresentNotify structures creation * CVE-2025-62230: Use-after-free in Xkb client resource removal * CVE-2025-62231: Value overflow in Xkb extension XkbSetCompatMap Checksums-Sha1: a8d256dbec1c797a3573e856df2972bd16a408b0 4041 xorg-server_21.1.20-1.dsc 29f19c137a6ab38bb12680fcb2ae384e5d8ac5a5 9012841 xorg-server_21.1.20.orig.tar.gz 90d9e63927198202a99be7db544b0b55df1e8d1f 178298 xorg-server_21.1.20-1.diff.gz 493d790407f5292e8b21f294e2bdfc18a901f347 13676 xorg-server_21.1.20-1_amd64.buildinfo Checksums-Sha256: a01733b2afeb1f297a21414ef06527fc1d1c2291385bf552ba318b00f2fe7df5 4041 xorg-server_21.1.20-1.dsc a51aea1cbb29cb8122e39c1c8728469d4fd8db71a538565fbf017df11841bf04 9012841 xorg-server_21.1.20.orig.tar.gz 4e0ca0d426837ddf1c1afced47fb6423a98b007880d5351dc7b4d26db300564a 178298 xorg-server_21.1.20-1.diff.gz 834d0b02f7a22fe96464f7b20e02eaf19345cc1d3365d22959c57a63da973359 13676 xorg-server_21.1.20-1_amd64.buildinfo Files: a3e86b47e8c6f9758bc3b121971058d3 4041 x11 optional xorg-server_21.1.20-1.dsc 7914cf72b05fefd36abc63bec8d94f54 9012841 x11 optional xorg-server_21.1.20.orig.tar.gz 2484256e28c0a23011b9fec4148ebc77 178298 x11 optional xorg-server_21.1.20-1.diff.gz ed57cccd2793f8bd7a54c022e73e8c76 13676 x11 optional xorg-server_21.1.20-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmkCIXcACgkQnUbEiOQ2 gwKvAw/+JyK6oNp/hSpO/pja4fk/1DJ2rx1QqpMmJ0nccTUezLI66gfp1BLBVf7Y bp1NCLgueJXbVeEIGQbzwcqkD0zDxN+vrW8SZ+qOx4VZtYIbp8DqtWWIfaxiRRQF by6+vvx6fuvRg5s733To9f4XKR5l7QzKAW32EwnkHRIHnOoAFylRVCEqvnN+kxWA lVBrKaa5MMDPMWJstEjCjp+68aiUm4lJ4raK6taphWlqOWGImr0g+INryEyWavCJ b0+3gl3M1mPjCg0l4h5sC1xSB8pCA3W6i2AFQaOdRX+5yzxA987Q+5ZAgfLzWmH2 ohtjPLAkXOYZt7DNHvQDQywajBzA6O6Dj40seqP8fMWMmMCEv2zacF9P62NOT3Om Jsnc0Buz/wLwGlsKmsu08BUgHizbeciTruHAI8DOToKTxQUvmLgYPusqOjusOKWN mmUlnQs6PmLY/8bNKLHyPjWA0Nv+2j2Izk4cLJcdScb9Clxnmu8um6uUR+Y44ouk LF+NhtQp53OqIx/oJVYX6NfSKnaeRVFqTC9WbtCJiIp6JiL1w130gozy1dqm4xad tNnP+id4PcCWGqrlDugQVXDeaKXORGuMrM117frn1UA3Pykdo7wmR02ai7I6udkq iiZfoXuet+mW3xyue7xHNvbJxnfCUYBS1gp0Rt1To+B4tszcbfE= =k4U7 -----END PGP SIGNATURE-----