Medium ALAS2023-2024-466 1 CVE

Moderate: ncurses security update (Amazon Linux 2023)

Published Jan 3, 2024 · Updated Jan 8, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-50495: NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

Fixed packages 13

Release	Package	Fixed in
Amazon Linux · 2023	ncurses	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-base	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-c++-libs	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-c++-libs-debuginfo	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-compat-libs	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-compat-libs-debuginfo	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-debuginfo	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-debugsource	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-devel	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-libs	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-libs-debuginfo	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-static	0:6.2-4.20200222.amzn2023.0.5
Amazon Linux · 2023	ncurses-term	0:6.2-4.20200222.amzn2023.0.5

Vulnerabilities 1

Unscored —

CVE-2023-50495

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

ncurses ncurses ncurses Debian Ubuntu Azure Linux

Dec 12, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-50495.html