maintainer-feedback requested: [Bug 291408] x11/xkbcomp: Update to 1.5.0
| Newsgroups | gmane.os.freebsd.devel.x11 |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
Bugzilla Automation <[email protected]> has asked freebsd-x11 (Nobody) <[email protected]> for maintainer-feedback: Bug 291408: x11/xkbcomp: Update to 1.5.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291408 --- Description --- x11/xkbcomp is currently vulnerable to the following: * CVE-2018-15853: Endless recursion in xkbcomp/expr.c resulting in a crash * CVE-2018-15859: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash * CVE-2018-15861: NULL pointer dereference in ExprResolveLhs resulting in a crash * CVE-2018-15863: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash vuxml has submitted in bug 291407