Synopsis:
ncurses security updateSummary:
An update for ncurses is now available for openEuler-20.03-LTS-SP4Description:
The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.
Security Fix(es):
The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.(CVE-2025-69720)Topic:
An update for ncurses is now available for openEuler-20.03-LTS-SP4.
openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.Severity:
HighAffected Component:
ncurses
6.2-8.oe2003sp46.2-8.oe2003sp46.2-8.oe2003sp46.2-8.oe2003sp46.2-8.oe2003sp46.2-8.oe2003sp46.2-8.oe2003sp4Exploitability
AV:LAC:LPR:NUI:RScope
S:UImpact
C:HI:HA:H7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H