Multiple vulnerabilities have been discovered in ncurses, the worst of which could lead to a denial of service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-libs/ncurses | * | < 6.4_p20230408 | >= 6.4_p20230408 |
| sys-libs/ncurses-compat | * | < 6.4_p20240330 | >= 6.4_p20240330 |
Free software emulation of curses in System V.
Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All ncurses users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-libs/ncurses-6.4_p20230408" # emerge --ask --oneshot --verbose ">=sys-libs/ncurses-compat-6.4_p20240330"
Multiple vulnerabilities have been found in ncurses, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| sys-libs/ncurses | * | < 6.1:0 | >= 6.1:0 |
Free software emulation of curses in System V.
Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details.
A remote attacker, by enticing the user to process untrusted terminfo or other data, could execute arbitrary code or cause a Denial of Service condition.
There is no known workaround at this time.
All ncurses users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=sys-libs/ncurses-6.1:0"