Medium ELSA-2023-5249 1 CVE

Moderate: ncurses security update (Oracle Linux 8)

Published Sep 20, 2023 · Updated Sep 20, 2023

Ecosystem: Oracle Linux

Summary

[6.1-9.20180224.1]
- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 8	ncurses	0:6.1-9.20180224.el8_8.1
Oracle Linux · 8	ncurses-base	0:6.1-9.20180224.el8_8.1
Oracle Linux · 8	ncurses-c++-libs	0:6.1-9.20180224.el8_8.1
Oracle Linux · 8	ncurses-compat-libs	0:6.1-9.20180224.el8_8.1
Oracle Linux · 8	ncurses-devel	0:6.1-9.20180224.el8_8.1
Oracle Linux · 8	ncurses-libs	0:6.1-9.20180224.el8_8.1
Oracle Linux · 8	ncurses-term	0:6.1-9.20180224.el8_8.1

Vulnerabilities 1

Unscored —

CVE-2023-29491

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory …

ncurses ncurses ncurses ncurses Debian Ubuntu Azure Linux Alpine

Apr 14, 2023