ELSA-2025-12876

Опубликовано: 05 авг. 2025

Источник: oracle-oval

Платформа: Oracle Linux 9

Описание

ELSA-2025-12876: ncurses security update (LOW)

[6.2-10.20210508.el9_6.2]

remove execute permissions from ANNOUNCE file (RHEL-102738)

[6.2-10.20210508.el9_6.1]

guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100139)

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

ncurses

6.2-10.20210508.el9_6.2

ncurses-base

6.2-10.20210508.el9_6.2

ncurses-c++-libs

6.2-10.20210508.el9_6.2

ncurses-devel

6.2-10.20210508.el9_6.2

ncurses-libs

6.2-10.20210508.el9_6.2

ncurses-term

6.2-10.20210508.el9_6.2

Oracle Linux x86_64

ncurses

6.2-10.20210508.el9_6.2

ncurses-base

6.2-10.20210508.el9_6.2

ncurses-c++-libs

6.2-10.20210508.el9_6.2

ncurses-devel

6.2-10.20210508.el9_6.2

ncurses-libs

6.2-10.20210508.el9_6.2

ncurses-term

6.2-10.20210508.el9_6.2

Связанные CVE

CVE-2022-29458

Ссылки на источники

Связанные уязвимости

CVE-2022-29458

CVSS3: 7.1

ubuntu

больше 3 лет назад

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.

CVE-2022-29458

CVSS3: 6.1

redhat

больше 3 лет назад

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.

CVE-2022-29458

CVSS3: 7.1

nvd

больше 3 лет назад

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.

CVE-2022-29458

CVSS3: 7.1

msrc

больше 3 лет назад

Описание отсутствует

CVE-2022-29458

CVSS3: 7.1

debian

больше 3 лет назад

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmen ...