Summary
[6.1-9.20180224]
- fix tput to accept -x option (#1916340)
[6.1-8.20180224]
- fix buffer overflow in terminfo entry hashtable (CVE-2019-17594)
- handle missing character after backslash in terminfo entry (CVE-2019-17595)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | ncurses | 0:6.1-9.20180224.el8 |
| Oracle Linux · 8 | ncurses-base | 0:6.1-9.20180224.el8 |
| Oracle Linux · 8 | ncurses-c++-libs | 0:6.1-9.20180224.el8 |
| Oracle Linux · 8 | ncurses-compat-libs | 0:6.1-9.20180224.el8 |
| Oracle Linux · 8 | ncurses-devel | 0:6.1-9.20180224.el8 |
| Oracle Linux · 8 | ncurses-libs | 0:6.1-9.20180224.el8 |
| Oracle Linux · 8 | ncurses-term | 0:6.1-9.20180224.el8 |
Vulnerabilities 2
-
Unscored —
There is a heap-based buffer over-read in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in n…
-
Unscored —
There is a heap-based buffer over-read in the fmt_entry function in tinfo/comp_hash.c in the terminfo library in ncurse…