Moderate: ncurses security and bug fix update
Summary
ALSA-2023:6698: Moderate: ncurses security and bug fix update. Affects ncurses versions < 6.2-10.20210508.el9. Fixed in 6.2-10.20210508.el9. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The ncurses library is a terminal-independent method of updating character screens with optimization. It includes support utilities such as a terminfo compiler, decompiler, and conversion tools. The vulnerability affects the ncurses package in AlmaLinux 9.
Vulnerability Detail
The vulnerability allows local users to trigger memory corruption through malformed data. This can lead to security-related issues. The CVE identifier for this vulnerability is CVE-2023-29491.
How To Fix
Minimum fixed version
6.2-10.20210508.el9
This is the first release that contains the fix.
sudo dnf update ncursesTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the ncurses package in AlmaLinux 9 is vulnerable to a memory corruption issue. It is recommended to update the package to the latest version to fix the vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for ncurses →
FAQ
ncurses is a library for updating character screens with optimization.
The vulnerability can lead to security-related memory corruption issues.
Update the ncurses package to version 6.2-10.20210508.el9 or later.
There are no known workarounds at this time.
You can find more information about this vulnerability in the CVE page linked in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for ncurses.
