Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:5913

Опубликовано: 09 апр. 2026
Источник: rocky
Оценка: Moderate

Описание

Moderate: ncurses security update

The ncurses (new curses) library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses packages contain support utilities including a terminfo compiler tic, a decompiler infocmp, clear, tput, tset, and a termcap conversion tool captoinfo.

Security Fix(es):

  • ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution. (CVE-2025-69720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 10

НаименованиеАрхитектураРелизRPM
ncurses-basenoarch15.20240127.el10_1ncurses-base-6.4-15.20240127.el10_1.noarch.rpm
ncurses-libsx86_6415.20240127.el10_1ncurses-libs-6.4-15.20240127.el10_1.x86_64.rpm
ncursesx86_6415.20240127.el10_1ncurses-6.4-15.20240127.el10_1.x86_64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 7.3
ubuntu
4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVSS3: 7.8
redhat
4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVSS3: 7.3
nvd
4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVSS3: 9.8
msrc
4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

CVSS3: 7.3
debian
4 месяца назад

The infocmp command-line tool in ncurses before 6.5-20251213 has a sta ...