[ANNOUNCE] xkbcomp 1.5.0

Wed Dec 3 04:18:14 UTC 2025

This releases contains the fixes for the issues reported in today's security
advisory: https://lists.x.org/archives/xorg-announce/2025-December/003644.html

* CVE-2018-15863
* CVE-2018-15861
* CVE-2018-15859
* CVE-2018-15853

Note that the year is not a typo, these CVEs have been reported previously for
libxkbcommon but the same code exists in xkbcomp and required the same fixes.

As a new feature in this version: xkbcomp now supports the meson build system
in addition to autotools. autotools support may be removed in a future version.

The full git shortlog for this release is below:

Alan Coopersmith (6):
 Assume target platforms have strcasecmp, strncasecmp, & strdup now
 Use _stricmp()/_strnicmp() instead of strcasecmp()/strncasecmp() on Windows
 Accept --help & --version as aliases to -help & -version
 Improve man page formatting
 man page: fix warnings from `mandoc -T lint`
 Make sure config.h is included before any system headers

Daniel Stone (3):
 xkbcomp: Don't crash on no-op modmask expressions
 xkbcomp: Don't falsely promise from ExprResolveLhs
 Fail expression lookup on invalid atoms

Matthieu Herrb (1):
 Symbols: resize the syms array when removing NoSymbol

Peter Hutterer (1):
 xkbcomp 1.5.0

Pierre Le Marre (12):
 Symbols: Fix out-of-bounds actions in MergeKeyGroups
 types: Fix warning for multiple map occurrences
 types: Fix typo in warning
 symbols: Fix NULL pointer dereference in MergeKeyGroups
 Add support for meson build
 Compare autotools and meson builds
 build: Fix meson linking order
 Fix various undefined behaviors
 parser: Fix whitespaces
 parser: Fix multiple keysyms per level parsing
 parser: Refactor multiple keysyms per level and add warning
 parser: Parse but discard multiple actions per level

Ran Benita (1):
 xkbcomp: fix stack overflow when evaluating boolean negation

git tag: xkbcomp-1.5.0

https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.gz
SHA256: d070694dd8d94714aa1da3e3590b75084a4b183da3980866aedd68835954b97c xkbcomp-1.5.0.tar.gz
SHA512: 31fe2bdc4bea177d14635bbd70c21284bac3ee5cd3c1aa0f27a7bd2ba7e0cf804cba980f8bf2a5357721d3f3e156f8d5569f2190a169c0a916dd1d87e107e572 xkbcomp-1.5.0.tar.gz
PGP: https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.gz.sig

https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.xz
SHA256: 2ac31f26600776db6d9cd79b3fcd272263faebac7eb85fb2f33c7141b8486060 xkbcomp-1.5.0.tar.xz
SHA512: d8ef4906261251e2600b3650660fbe88ed99a44694f1e59b433e0811f1ab5234c4f2f0b3647fa5372fb0f46b56eac60c0219a762bf1af0ab06226b63e4a6b081 xkbcomp-1.5.0.tar.xz
PGP: https://xorg.freedesktop.org/archive/individual/app/xkbcomp-1.5.0.tar.xz.sig

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://lists.x.org/archives/xorg-announce/attachments/20251203/31b96903/attachment.sig>

URL: https://lists.x.org/archives/xorg-announce/2025-December/003645.html

⇱ [ANNOUNCE] xkbcomp 1.5.0

[ANNOUNCE] xkbcomp 1.5.0