OESA-2024-1125

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1125

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2024-1125.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2024-1125

Upstream

CVE-2023-45918

Published

2024-02-02T11:06:54Z

Modified

2025-09-03T06:19:32.365407Z

Summary

ncurses security update

Details

The ncurses (new curses) library is a free software emulation of curses in System V Release 4.0 (SVr4), and more. It uses terminfo format, supports pads and color and multiple highlights and forms characters and function-key mapping, and has all the other SVr4-curses enhancements over BSD curses. SVr4 curses became the basis of X/Open Curses.

Security Fix(es):

A vulnerability was found in GNU ncurses 6.4-20230610. It has been rated as problematic. This issue affects the function tgetstr. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2023-45918)

Database specific

{
    "severity": "Low"
}

References

Affected packages

openEuler:20.03-LTS-SP1 / ncurses

Package

Name: ncurses
Purl: pkg:rpm/openEuler/ncurses&distro=openEuler-20.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.2-6.oe1

Ecosystem specific

{
    "src": [
        "ncurses-6.2-6.oe1.src.rpm"
    ],
    "x86_64": [
        "ncurses-help-6.2-6.oe1.x86_64.rpm",
        "ncurses-devel-6.2-6.oe1.x86_64.rpm",
        "ncurses-debuginfo-6.2-6.oe1.x86_64.rpm",
        "ncurses-libs-6.2-6.oe1.x86_64.rpm",
        "ncurses-debugsource-6.2-6.oe1.x86_64.rpm",
        "ncurses-6.2-6.oe1.x86_64.rpm"
    ],
    "noarch": [
        "ncurses-base-6.2-6.oe1.noarch.rpm"
    ],
    "aarch64": [
        "ncurses-libs-6.2-6.oe1.aarch64.rpm",
        "ncurses-debuginfo-6.2-6.oe1.aarch64.rpm",
        "ncurses-6.2-6.oe1.aarch64.rpm",
        "ncurses-devel-6.2-6.oe1.aarch64.rpm",
        "ncurses-help-6.2-6.oe1.aarch64.rpm",
        "ncurses-debugsource-6.2-6.oe1.aarch64.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / ncurses

Package

Name: ncurses
Purl: pkg:rpm/openEuler/ncurses&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.2-6.oe2003sp4

Ecosystem specific

{
    "src": [
        "ncurses-6.2-6.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "ncurses-devel-6.2-6.oe2003sp4.x86_64.rpm",
        "ncurses-debugsource-6.2-6.oe2003sp4.x86_64.rpm",
        "ncurses-debuginfo-6.2-6.oe2003sp4.x86_64.rpm",
        "ncurses-6.2-6.oe2003sp4.x86_64.rpm",
        "ncurses-help-6.2-6.oe2003sp4.x86_64.rpm",
        "ncurses-libs-6.2-6.oe2003sp4.x86_64.rpm"
    ],
    "noarch": [
        "ncurses-base-6.2-6.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "ncurses-help-6.2-6.oe2003sp4.aarch64.rpm",
        "ncurses-6.2-6.oe2003sp4.aarch64.rpm",
        "ncurses-libs-6.2-6.oe2003sp4.aarch64.rpm",
        "ncurses-debugsource-6.2-6.oe2003sp4.aarch64.rpm",
        "ncurses-devel-6.2-6.oe2003sp4.aarch64.rpm",
        "ncurses-debuginfo-6.2-6.oe2003sp4.aarch64.rpm"
    ]
}

openEuler:22.03-LTS / ncurses

Package

Name: ncurses
Purl: pkg:rpm/openEuler/ncurses&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.3-14.oe2203sp3

Ecosystem specific

{
    "src": [
        "ncurses-6.3-8.oe2203.src.rpm",
        "ncurses-6.3-10.oe2203sp1.src.rpm",
        "ncurses-6.3-14.oe2203sp2.src.rpm",
        "ncurses-6.3-14.oe2203sp3.src.rpm"
    ],
    "x86_64": [
        "ncurses-libs-6.3-8.oe2203.x86_64.rpm",
        "ncurses-6.3-8.oe2203.x86_64.rpm",
        "ncurses-compat-libs-6.3-8.oe2203.x86_64.rpm",
        "ncurses-debuginfo-6.3-8.oe2203.x86_64.rpm",
        "ncurses-debugsource-6.3-8.oe2203.x86_64.rpm",
        "ncurses-devel-6.3-8.oe2203.x86_64.rpm",
        "ncurses-help-6.3-8.oe2203.x86_64.rpm",
        "ncurses-debuginfo-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-help-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-static-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-devel-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-compat-libs-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-debugsource-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-libs-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-static-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-libs-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-help-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-devel-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-libs-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-devel-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-help-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-static-6.3-14.oe2203sp3.x86_64.rpm"
    ],
    "noarch": [
        "ncurses-base-6.3-8.oe2203.noarch.rpm",
        "ncurses-base-6.3-10.oe2203sp1.noarch.rpm",
        "ncurses-base-6.3-14.oe2203sp2.noarch.rpm",
        "ncurses-base-6.3-14.oe2203sp3.noarch.rpm"
    ],
    "aarch64": [
        "ncurses-devel-6.3-8.oe2203.aarch64.rpm",
        "ncurses-libs-6.3-8.oe2203.aarch64.rpm",
        "ncurses-compat-libs-6.3-8.oe2203.aarch64.rpm",
        "ncurses-debuginfo-6.3-8.oe2203.aarch64.rpm",
        "ncurses-debugsource-6.3-8.oe2203.aarch64.rpm",
        "ncurses-6.3-8.oe2203.aarch64.rpm",
        "ncurses-help-6.3-8.oe2203.aarch64.rpm",
        "ncurses-static-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-debugsource-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-devel-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-help-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-debuginfo-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-libs-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-compat-libs-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-help-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-static-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-devel-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-libs-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-libs-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-help-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-static-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-devel-6.3-14.oe2203sp3.aarch64.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / ncurses

Package

Name: ncurses
Purl: pkg:rpm/openEuler/ncurses&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.3-10.oe2203sp1

Ecosystem specific

{
    "src": [
        "ncurses-6.3-10.oe2203sp1.src.rpm"
    ],
    "x86_64": [
        "ncurses-debuginfo-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-help-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-static-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-devel-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-compat-libs-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-debugsource-6.3-10.oe2203sp1.x86_64.rpm",
        "ncurses-libs-6.3-10.oe2203sp1.x86_64.rpm"
    ],
    "noarch": [
        "ncurses-base-6.3-10.oe2203sp1.noarch.rpm"
    ],
    "aarch64": [
        "ncurses-static-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-debugsource-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-devel-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-help-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-debuginfo-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-libs-6.3-10.oe2203sp1.aarch64.rpm",
        "ncurses-compat-libs-6.3-10.oe2203sp1.aarch64.rpm"
    ]
}

openEuler:22.03-LTS-SP2 / ncurses

Package

Name: ncurses
Purl: pkg:rpm/openEuler/ncurses&distro=openEuler-22.03-LTS-SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.3-14.oe2203sp2

Ecosystem specific

{
    "src": [
        "ncurses-6.3-14.oe2203sp2.src.rpm"
    ],
    "x86_64": [
        "ncurses-static-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-libs-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-help-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-devel-6.3-14.oe2203sp2.x86_64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp2.x86_64.rpm"
    ],
    "noarch": [
        "ncurses-base-6.3-14.oe2203sp2.noarch.rpm"
    ],
    "aarch64": [
        "ncurses-help-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-static-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-devel-6.3-14.oe2203sp2.aarch64.rpm",
        "ncurses-libs-6.3-14.oe2203sp2.aarch64.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / ncurses

Package

Name: ncurses
Purl: pkg:rpm/openEuler/ncurses&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.3-14.oe2203sp3

Ecosystem specific

{
    "src": [
        "ncurses-6.3-14.oe2203sp3.src.rpm"
    ],
    "x86_64": [
        "ncurses-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-libs-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-devel-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-help-6.3-14.oe2203sp3.x86_64.rpm",
        "ncurses-static-6.3-14.oe2203sp3.x86_64.rpm"
    ],
    "noarch": [
        "ncurses-base-6.3-14.oe2203sp3.noarch.rpm"
    ],
    "aarch64": [
        "ncurses-libs-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-help-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-debugsource-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-static-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-debuginfo-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-compat-libs-6.3-14.oe2203sp3.aarch64.rpm",
        "ncurses-devel-6.3-14.oe2203sp3.aarch64.rpm"
    ]
}