Skip to content
OpenAdvisories
Medium ALAS2023-2024-554 1 CVE

Moderate: ncurses security update (Amazon Linux 2023)

Published Feb 29, 2024 · Updated Mar 5, 2024

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-45918: ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.

Fixed packages 13

ReleasePackageFixed in
Amazon Linux · 2023 ncurses 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-base 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-c++-libs 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-c++-libs-debuginfo 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-compat-libs 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-compat-libs-debuginfo 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-debuginfo 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-debugsource 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-devel 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-libs 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-libs-debuginfo 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-static 0:6.2-4.20200222.amzn2023.0.6
Amazon Linux · 2023 ncurses-term 0:6.2-4.20200222.amzn2023.0.6

Vulnerabilities 1

  • Unscored —
    CVE-2023-45918 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2023-45918.html