Red Hat Security Advisory

RHSA-2026:26357

ncurses security update

Released 2026-06-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) ncurses-c++-libs-6.4-14.20240127.el10_0.1, ncurses-devel-6.4-14.20240127.el10_0.1, ncurses-term-6.4-14.20240127.el10_0.1
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) ncurses-6.4-14.20240127.el10_0.1, ncurses-base-6.4-14.20240127.el10_0.1, ncurses-libs-6.4-14.20240127.el10_0.1

TI-2025-42919 CVE-2025-69720 · GHSA-9952-mrqj-h4jh

HIGH 82

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00475 Published 2026-03-19 Fixed in 6.5-20251213 CWE-121