Medium ALAS2-2024-2380 1 CVE

Moderate: ncurses security update (Amazon Linux 2)

Published Jan 3, 2024 · Updated Jan 9, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-50495: NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

Fixed packages 9

Release	Package	Fixed in
Amazon Linux · 2	ncurses	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-base	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-c++-libs	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-compat-libs	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-debuginfo	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-devel	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-libs	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-static	0:6.0-8.20170212.amzn2.1.7
Amazon Linux · 2	ncurses-term	0:6.0-8.20170212.amzn2.1.7

Vulnerabilities 1

Unscored —

CVE-2023-50495

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

ncurses ncurses ncurses Debian Ubuntu Azure Linux

Dec 12, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-50495.html