Alpine/xkbcomp: medium 5.5
Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers
Action: Upgrade xkbcomp to 1.5.0-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0-r0 | - |
Fixed versions
| 1.5.0-r0 |
Sources
- osv: ALPINE-CVE-2018-15853#Alpine:v3.20/xkbcomp
- https://security.alpinelinux.org/vuln/CVE-2018-15853
published · modified · JSON