Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 9: Resolving xkbcomp Crash Issues with MGASA-2025-0321 and CVEs

mageia
Calendar Grey December 5, 2025
Dist Mageia Esm H88
Mageia's xkbcomp package has been updated to address critical crashes from multiple security issues. Patch now!
MGASA-2025-0321 - Updated xkbcomp packages fix security vulnerabilities

Summary

Description: Endless recursion in xkbcomp/expr.c resulting in a crash. (CVE-2018-15853) NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash. (CVE-2018-15859) NULL pointer dereference in ExprResolveLhs resulting in a crash. (CVE-2018-15861) NULL pointer dereference in ResolveStateAndPredicate resulting in a crash. (CVE-2018-15863)

References

- https://bugs.mageia.org/show_bug.cgi?id=34796

- https://www.openwall.com/lists/oss-security/2025/12/03/1

- https://www.cve.org/CVERecord?id=CVE-2018-15853

- https://www.cve.org/CVERecord?id=CVE-2018-15859

- https://www.cve.org/CVERecord?id=CVE-2018-15861

- https://www.cve.org/CVERecord?id=CVE-2018-15863

Topics%20covered

Topics Covered

security advisory security issue important crash Mageia xkbcomp

Resolution

SRPMS

- 9/core/xkbcomp-1.4.6-1.1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 04 Dec 2025
URL: https://advisories.mageia.org/MGASA-2025-0321.html
Type: security
CVE: CVE-2018-15853, CVE-2018-15859, CVE-2018-15861, CVE-2018-15863

Topics%20covered

Topics Covered

security advisory security issue important crash Mageia xkbcomp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here