This releases contains the fixes for the issues reported in today's security
advisory: https://lists.x.org/archives/xorg-announce/2025-December/003644.html
* CVE-2018-15863
* CVE-2018-15861
* CVE-2018-15859
* CVE-2018-15853
Note that the year is not a typo, these CVEs have been reported previously for
libxkbcommon but the same code exists in xkbcomp and required the same fixes.
As a new feature in this version: xkbcomp now supports the meson build system
in addition to autotools. autotools support may be removed in a future version.
The full git shortlog for this release is below:
Alan Coopersmith (6):
Assume target platforms have strcasecmp, strncasecmp, & strdup now
Use _stricmp()/_strnicmp() instead of strcasecmp()/strncasecmp() on
Windows
Accept --help & --version as aliases to -help & -version
Improve man page formatting
man page: fix warnings from `mandoc -T lint`
Make sure config.h is included before any system headers
Daniel Stone (3):
xkbcomp: Don't crash on no-op modmask expressions
xkbcomp: Don't falsely promise from ExprResolveLhs
Fail expression lookup on invalid atoms
Matthieu Herrb (1):
Symbols: resize the syms array when removing NoSymbol
Peter Hutterer (1):
xkbcomp 1.5.0
Pierre Le Marre (12):
Symbols: Fix out-of-bounds actions in MergeKeyGroups
types: Fix warning for multiple map occurrences
types: Fix typo in warning
symbols: Fix NULL pointer dereference in MergeKeyGroups
Add support for meson build
Compare autotools and meson builds
build: Fix meson linking order
Fix various undefined behaviors
parser: Fix whitespaces
parser: Fix multiple keysyms per level parsing
parser: Refactor multiple keysyms per level and add warning
parser: Parse but discard multiple actions per level
Ran Benita (1):
xkbcomp: fix stack overflow when evaluating boolean negation
git tag: xkbcomp-1.5.0
https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.gz
SHA256: d070694dd8d94714aa1da3e3590b75084a4b183da3980866aedd68835954b97c
xkbcomp-1.5.0.tar.gz
SHA512:
31fe2bdc4bea177d14635bbd70c21284bac3ee5cd3c1aa0f27a7bd2ba7e0cf804cba980f8bf2a5357721d3f3e156f8d5569f2190a169c0a916dd1d87e107e572
xkbcomp-1.5.0.tar.gz
PGP:
https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.gz.sig
https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.xz
SHA256: 2ac31f26600776db6d9cd79b3fcd272263faebac7eb85fb2f33c7141b8486060
xkbcomp-1.5.0.tar.xz
SHA512:
d8ef4906261251e2600b3650660fbe88ed99a44694f1e59b433e0811f1ab5234c4f2f0b3647fa5372fb0f46b56eac60c0219a762bf1af0ab06226b63e4a6b081
xkbcomp-1.5.0.tar.xz
PGP:
https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.xz.sig
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL:
<https://lists.x.org/archives/xorg-announce/attachments/20251203/31b96903/attachment.sig>