Low ELSA-2025-12876 1 CVE

Low: ncurses security update (Oracle Linux 9)

Published Aug 5, 2025 · Updated Aug 5, 2025

Ecosystem: Oracle Linux

Summary

[6.2-10.20210508.el9_6.2]
- remove execute permissions from ANNOUNCE file (RHEL-102738)

[6.2-10.20210508.el9_6.1]
- guard against corrupt terminfo data in string conversion (CVE-2022-29458
RHEL-100139)

Fixed packages 6

Release	Package	Fixed in
Oracle Linux · 9	ncurses	0:6.2-10.20210508.el9_6.2
Oracle Linux · 9	ncurses-base	0:6.2-10.20210508.el9_6.2
Oracle Linux · 9	ncurses-c++-libs	0:6.2-10.20210508.el9_6.2
Oracle Linux · 9	ncurses-devel	0:6.2-10.20210508.el9_6.2
Oracle Linux · 9	ncurses-libs	0:6.2-10.20210508.el9_6.2
Oracle Linux · 9	ncurses-term	0:6.2-10.20210508.el9_6.2

Vulnerabilities 1

High 7.1

CVE-2022-29458

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read…

ncurses ncurses ncurses ncurses Debian Ubuntu Azure Linux Alpine

Apr 18, 2022