Red Hat Security AdvisoryRHSA-2023:7361
ncurses security update
Released 2023-11-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.2) ncurses-c++-libs-6.2-8.20210508.el9_2.1, ncurses-devel-6.2-8.20210508.el9_2.1, ncurses-term-6.2-8.20210508.el9_2.1
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) ncurses-6.2-8.20210508.el9_2.1, ncurses-base-6.2-8.20210508.el9_2.1, ncurses-libs-6.2-8.20210508.el9_2.1
Fixes 1 record
Priority LOW 38
ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00979 · Published 2023-04-14 · Partial fix CWE-787
