Publishing details

Changelog

ncurses (6.4-2ubuntu0.1) lunar-security; urgency=medium

  * SECURITY UPDATE: memory corruption when processing malformed terminfo data
    entries loaded by setuid/setgid programs
    - debian/patches/CVE-2023-29491-mitigation-1.patch: fix copy/paste error
      in configure.in.
    - debian/patches/CVE-2023-29491-mitigation-2.patch: change the
      --disable-root-environ configure option behavior.
    - debian/rules: set --disable-root-environ in configuration options.
    - debian/libtinfo5.symbols, debian/libtinfo6.symbols: add _nc_env_access
      to symbols files.
    - CVE-2023-29491

 -- Camila Camargo de Matos <email address hidden>  Tue, 16 May 2023 15:25:33 -0300

Available diffs

Builds

Built packages

Package files