Debian Package Tracker - libxkbcommon

general

source: libxkbcommon (main)
version: 0.10.0-1
maintainer: Debian X Strike Force (archive) (DMD)
uploaders: Michael Stapelberg [DMD]
arch: all any
std-ver: 4.4.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.4.3-2
oldstable: 0.7.1-2~deb9u1
stable: 0.8.2-1
testing: 0.10.0-1
unstable: 0.10.0-1

versioned links

0.4.3-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.7.1-2~deb9u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.8.2-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.10.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

libxkbcommon-dev
libxkbcommon-doc
libxkbcommon-x11-0 (1 bugs: 0, 1, 0, 0)
libxkbcommon-x11-dev
libxkbcommon0

action needed

1 bug tagged patch in the BTS normal

The BTS contains patches fixing 1 bug, consider including or untagging them.

Created: 2020-02-26 Last update: 2020-05-30 09:01

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 0.10.0-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 235605d2e28e3cd6bf1d109f651e7c99267e1ea4
Author: Timo Aaltonen <tjaalton@debian.org>
Date:   Fri Feb 28 19:20:13 2020 +0200

    control: Migrate to x11proto-dev.

Created: 2019-12-12 Last update: 2020-05-28 01:38

lintian reports 5 warnings normal

Lintian reports 5 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-05-21 Last update: 2020-05-21 00:05

11 ignored security issues in jessie low

There are 11 open security issues in jessie.

11 issues skipped by the security teams:

CVE-2018-15861: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
CVE-2018-15863: Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.
CVE-2018-15862: Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.
CVE-2018-15864: Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.
CVE-2018-15858: Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file.
CVE-2018-15859: Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.
CVE-2018-15854: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
CVE-2018-15855: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled.
CVE-2018-15856: An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
CVE-2018-15857: An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file.
CVE-2018-15853: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.

Please fix them.

Created: 2018-08-26 Last update: 2020-02-11 05:02

11 ignored security issues in stretch low

There are 11 open security issues in stretch.

11 issues skipped by the security teams:

CVE-2018-15861: Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.
CVE-2018-15863: Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.
CVE-2018-15862: Unchecked NULL pointer usage in LookupModMask in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with invalid virtual modifiers.
CVE-2018-15864: Unchecked NULL pointer usage in resolve_keysym in xkbcomp/parser.y in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because a map access attempt can occur for a map that was never created.
CVE-2018-15858: Unchecked NULL pointer usage when handling invalid aliases in CopyKeyAliasesToKeymap in xkbcomp/keycodes.c in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file.
CVE-2018-15859: Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.
CVE-2018-15854: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because geometry tokens were desupported incorrectly.
CVE-2018-15855: Unchecked NULL pointer usage in xkbcommon before 0.8.1 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because the XkbFile for an xkb_geometry section was mishandled.
CVE-2018-15856: An infinite loop when reaching EOL unexpectedly in compose/parser.c (aka the keymap parser) in xkbcommon before 0.8.1 could be used by local attackers to cause a denial of service during parsing of crafted keymap files.
CVE-2018-15857: An invalid free in ExprAppendMultiKeysymList in xkbcomp/ast-build.c in xkbcommon before 0.8.1 could be used by local attackers to crash xkbcommon keymap parsers or possibly have unspecified other impact by supplying a crafted keymap file.
CVE-2018-15853: Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.

Please fix them.

Created: 2018-08-26 Last update: 2020-02-11 05:02

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.5.0 instead of 4.4.0).

Created: 2019-09-29 Last update: 2020-02-06 17:05

news

[rss feed]

[2020-02-11] libxkbcommon 0.10.0-1 MIGRATED to testing (Debian testing watch)
[2020-02-06] Accepted libxkbcommon 0.10.0-1 (source) into unstable (Timo Aaltonen)
[2019-11-04] libxkbcommon 0.9.1-1 MIGRATED to testing (Debian testing watch)
[2019-10-30] Accepted libxkbcommon 0.9.1-1 (source) into unstable (Timo Aaltonen)
[2019-09-13] libxkbcommon 0.8.4-1 MIGRATED to testing (Debian testing watch)
[2019-09-07] Accepted libxkbcommon 0.8.4-1 (source) into unstable (Timo Aaltonen)
[2018-09-04] libxkbcommon 0.8.2-1 MIGRATED to testing (Debian testing watch)
[2018-08-30] Accepted libxkbcommon 0.8.2-1 (source) into unstable (Timo Aaltonen)
[2018-06-12] libxkbcommon 0.8.0-2 MIGRATED to testing (Debian testing watch)
[2018-06-06] Accepted libxkbcommon 0.8.0-2 (source amd64 all) into unstable, unstable (Timo Aaltonen)
[2018-01-08] libxkbcommon 0.8.0-1 MIGRATED to testing (Debian testing watch)
[2018-01-02] Accepted libxkbcommon 0.8.0-1 (source) into unstable (Timo Aaltonen)
[2017-11-29] Accepted libxkbcommon 0.7.1-2~deb9u1 (source) into proposed-updates->stable-new, proposed-updates (Andreas Beckmann)
[2017-09-21] libxkbcommon 0.7.1-2 MIGRATED to testing (Debian testing watch)
[2017-09-16] Accepted libxkbcommon 0.7.1-2 (source) into unstable (Julien Cristau)
[2017-01-29] libxkbcommon 0.7.1-1 MIGRATED to testing (Debian testing watch)
[2017-01-18] Accepted libxkbcommon 0.7.1-1 (source) into unstable (Emilio Pozuelo Monfort)
[2016-12-18] libxkbcommon 0.7.0-1 MIGRATED to testing (Debian testing watch)
[2016-12-07] Accepted libxkbcommon 0.7.0-1 (source) into unstable (Emilio Pozuelo Monfort)
[2016-08-28] libxkbcommon 0.6.1-1 MIGRATED to testing (Debian testing watch)
[2016-08-22] Accepted libxkbcommon 0.6.1-1 (source amd64) into unstable (Michael Stapelberg)
[2015-05-24] libxkbcommon 0.5.0-1 MIGRATED to testing (Britney)
[2015-05-18] Accepted libxkbcommon 0.5.0-1 (source amd64) into unstable (Michael Stapelberg)
[2014-09-19] libxkbcommon 0.4.3-2 MIGRATED to testing (Britney)
[2014-09-16] Accepted libxkbcommon 0.4.3-2 (source amd64) into unstable (Emilio Pozuelo Monfort)
[2014-09-05] Accepted libxkbcommon 0.4.3-1 (source amd64) into unstable (Emilio Pozuelo Monfort)
[2014-07-28] libxkbcommon 0.4.1-2 MIGRATED to testing (Britney)
[2014-07-23] Accepted libxkbcommon 0.4.1-2 (source amd64) (Michael Stapelberg)
[2014-07-18] Accepted libxkbcommon 0.4.1-1 (source amd64) (Michael Stapelberg)
[2014-02-21] libxkbcommon 0.4.0-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 3
RC: 0
I&N: 2
M&W: 1
F&P: 0
patch: 1

links

homepage
lintian (0, 5)
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
security tracker

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.10.0-1
2 bugs