Linux · Ubuntu · Package update · August 24, 2018

libxkbcommon0 0.8.0-1ubuntu0.1: libxkbcommon0 0.8.0-1ubuntu0.1 for Ubuntu 18.04.6 LTS (bionic)

libxkbcommon0 0.8.0-1ubuntu0.1, released August 24, 2018, fixes 11 CVEs in libxkbcommon0. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
11
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0054
45th percentile

Priority of the 11 CVEs

Patch now 0 Urgent 0 High 0 Routine 11

Fixed package versions

ProductReleaseFixed in
libxkbcommon0Ubuntu 18.04.6 LTS (bionic)0.8.0-1ubuntu0.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2018-15853 xkbcomp: endless recursion triggered by a crafted keymap file that induces boolean negation can lead to an/a 0.0054 None reported
Routine CVE-2018-15859 xkbcomp: NULL pointer dereference triggered by a specially a crafted keymap file can lead to a crashn/a 0.0054 None reported
Routine CVE-2018-15861 xkbcomp: NULL pointer dereference triggered by a crafted keymap file that induces an `xkb_intern_atom` failuren/a 0.0054 None reported
Routine CVE-2018-15863 xkbcomp: NULL pointer dereference triggered by a a crafted keymap file with a no-op modmask expression cann/a 0.0054 None reported
Routine CVE-2018-15857 libxkbcommon0: An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local...n/a 0.0045 None reported
Routine CVE-2018-15854 libxkbcommon0: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefe...n/a 0.0043 None reported
Routine CVE-2018-15855 libxkbcommon0: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer derefe...n/a 0.0043 None reported
Routine CVE-2018-15862 libxkbcommon0: Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local atta...n/a 0.0043 None reported
Routine CVE-2018-15864 libxkbcommon0: Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local a...n/a 0.0043 None reported
Routine CVE-2018-15858 libxkbcommon0: Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcomm...n/a 0.0043 None reported
Routine CVE-2018-15856 libxkbcommon0: An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1...n/a 0.0043 None reported
Showing 1 to 11 of 11 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.