Red Hat’s Peter Hutterer announced the release today of xkbcomp 1.5, the CLI utility used for compiling X Keyboard Extension (XBD) keyboard descriptions for the X.Org Server. Driving this new xkbcomp release are fixes for four security issues.

These four security issues originate from within code originally inside the libxkbcommon library and back in 2018 was flagged with four CVEs. Those security issues included endless recursion resulting in a crash and three null pointer dereference issues leading to possible crashes.