SUSE-SU-2025:4426-1

Опубликовано: 17 дек. 2025

Источник: suse-cvrf

Описание

Security update for xkbcomp

This update for xkbcomp fixes the following issues:

CVE-2018-15863: NULL pointer dereference triggered by a a crafted keymap file with a no-op modmask expression can lead to a crash (bsc#1105832).
CVE-2018-15861: NULL pointer dereference triggered by a crafted keymap file that induces an xkb_intern_atom failure can lead to a crash (bsc#1105832).
CVE-2018-15859: NULL pointer dereference triggered by a specially a crafted keymap file can lead to a crash (bsc#1105832).
CVE-2018-15853: endless recursion triggered by a crafted keymap file that induces boolean negation can lead to a crash (bsc#1105832).

Список пакетов

Container suse/kiosk/xorg:latest

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Hardened

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Hardened-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Hardened-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAPCAL

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAPCAL-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAPCAL-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAPCAL-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Azure-3P

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Hardened-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAP-Hardened-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAPCAL-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAPCAL-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP5-SAPCAL-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Azure-3P

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAP-Hardened-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAPCAL

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAPCAL-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAPCAL-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP6-SAPCAL-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Azure-3P

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-GCE-3P

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Hardened-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAP-Hardened-GCE

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAPCAL-Azure

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAPCAL-EC2

xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP7-SAPCAL-GCE

xkbcomp-1.4.1-150000.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

xkbcomp-1.4.1-150000.3.6.1

xkbcomp-devel-1.4.1-150000.3.6.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

xkbcomp-1.4.1-150000.3.6.1

xkbcomp-devel-1.4.1-150000.3.6.1

openSUSE Leap 15.6

xkbcomp-1.4.1-150000.3.6.1

xkbcomp-devel-1.4.1-150000.3.6.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20254426-1/
Link for SUSE-SU-2025:4426-1
https://lists.suse.com/pipermail/sle-security-updates/2025-December/023569.html
E-Mail link for SUSE-SU-2025:4426-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1105832
SUSE Bug 1105832
https://www.suse.com/security/cve/CVE-2018-15853/
SUSE CVE CVE-2018-15853 page
https://www.suse.com/security/cve/CVE-2018-15859/
SUSE CVE CVE-2018-15859 page
https://www.suse.com/security/cve/CVE-2018-15861/
SUSE CVE CVE-2018-15861 page
https://www.suse.com/security/cve/CVE-2018-15863/
SUSE CVE CVE-2018-15863 page

Описание

Endless recursion exists in xkbcomp/expr.c in xkbcommon and libxkbcommon before 0.8.1, which could be used by local attackers to crash xkbcommon users by supplying a crafted keymap file that triggers boolean negation.

Затронутые продукты

Container suse/kiosk/xorg:latest:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-15853.html
CVE-2018-15853
https://bugzilla.suse.com/1105832
SUSE Bug 1105832

Описание

Unchecked NULL pointer usage when parsing invalid atoms in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file, because lookup failures are mishandled.

Затронутые продукты

Container suse/kiosk/xorg:latest:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-15859.html
CVE-2018-15859
https://bugzilla.suse.com/1105832
SUSE Bug 1105832

Описание

Unchecked NULL pointer usage in ExprResolveLhs in xkbcomp/expr.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file that triggers an xkb_intern_atom failure.

Затронутые продукты

Container suse/kiosk/xorg:latest:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-15861.html
CVE-2018-15861
https://bugzilla.suse.com/1105832
SUSE Bug 1105832

Описание

Unchecked NULL pointer usage in ResolveStateAndPredicate in xkbcomp/compat.c in xkbcommon before 0.8.2 could be used by local attackers to crash (NULL pointer dereference) the xkbcommon parser by supplying a crafted keymap file with a no-op modmask expression.

Затронутые продукты

Container suse/kiosk/xorg:latest:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:xkbcomp-1.4.1-150000.3.6.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:xkbcomp-1.4.1-150000.3.6.1

Ссылки

https://www.suse.com/security/cve/CVE-2018-15863.html
CVE-2018-15863
https://bugzilla.suse.com/1105832
SUSE Bug 1105832