Skip to content
OpenAdvisories
Medium ALAS2-2024-2482 1 CVE

Moderate: ncurses security update (Amazon Linux 2)

Published Feb 29, 2024 · Updated Mar 4, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-45918: ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

Fixed packages 9

ReleasePackageFixed in
Amazon Linux · 2 ncurses 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-base 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-c++-libs 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-compat-libs 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-debuginfo 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-devel 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-libs 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-static 0:6.0-8.20170212.amzn2.1.8
Amazon Linux · 2 ncurses-term 0:6.0-8.20170212.amzn2.1.8

Vulnerabilities 1

  • Unscored —
    CVE-2023-45918 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-45918.html