portage-ng / portage / sys-libs / ncurses-compat / 6.4_p20240414
version « ‹ 6.4_p20240414 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 1 bugs
legacy emerge pmerge
portage-ng glsa
1 advisory reference sys-libs/ncurses-compat · none place version 6.4_p20240414 in a vulnerable range
▸ GLSA 202408-19 ncurses: Multiple Vulnerabilities this version unaffected normal remote 2024-08-09

Multiple vulnerabilities have been discovered in ncurses, the worst of which could lead to a denial of service.

Announced
2024-08-09
Revised
2024-08-09
Access
remote
Bugs
#839351 #904247
Advisory
https://security.gentoo.org/glsa/202408-19

Affected packages

PackageArchVulnerableUnaffected
sys-libs/ncurses*< 6.4_p20230408>= 6.4_p20230408
sys-libs/ncurses-compat*< 6.4_p20240330>= 6.4_p20240330

Background

Free software emulation of curses in System V.

Description

Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All ncurses users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-libs/ncurses-6.4_p20230408"
# emerge --ask --oneshot --verbose ">=sys-libs/ncurses-compat-6.4_p20240330"

References