openSUSE-SU-2019:2550-1

Details

Description of the patch:

This update for ncurses fixes the following issues:

Security issues fixed:

CVE-2019-17594: Fixed a heap-based buffer over-read in the _nc_find_entry function (bsc#1154036).
CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037).

Non-security issue fixed:

Removed screen.xterm from terminfo database (bsc#1103320).

This update was imported from the SUSE:SLE-15:Update update project.

Affected Packages(14 packages)

libncurses5

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

libncurses5-32bit

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

libncurses6

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

libncurses6-32bit

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

ncurses-devel

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

ncurses-devel-32bit

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

ncurses-utils

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

ncurses5-devel

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

ncurses5-devel-32bit

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

tack

openSUSE Leap 15.0

Fixed in:

6.1-lp150.9.1

References

ADVISORY

https://bugzilla.suse.com/1103320

ADVISORY

https://bugzilla.suse.com/1154036

ADVISORY

https://bugzilla.suse.com/1154037

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6FHEFDTN3LEEFN2RM3PLOTVQQE3AJWPT/#6FHEFDTN3LEEFN2RM3PLOTVQQE3AJWPT

ADVISORY

https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/6FHEFDTN3LEEFN2RM3PLOTVQQE3AJWPT/#6FHEFDTN3LEEFN2RM3PLOTVQQE3AJWPT

ADVISORY

https://www.suse.com/security/cve/CVE-2019-17594/

ADVISORY

https://www.suse.com/security/cve/CVE-2019-17595/

WEB

https://www.suse.com/support/security/rating/