SUSE-SU-2018:0120-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2018:0120-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2018:0120-1
- Related
- Published
- 2018-01-17T08:38:48Z
- Modified
- 2018-01-17T08:38:48Z
- Summary
- Security update for ncurses
- Details
-
This update for ncurses fixes the following issues:
Security issues fixed:
- CVE-2017-13728: Fix infinite loop in the nextchar function in compscan.c (bsc#1056136).
- CVE-2017-13730: Fix illegal address access in the function ncreadentrysource() (bsc#1056131).
- CVE-2017-13733: Fix illegal address access in the fmt_entry function (bsc#1056127).
- CVE-2017-13729: Fix illegal address access in the ncsave_str (bsc#1056132).
- CVE-2017-13732: Fix illegal address access in the function dump_uses() (bsc#1056128).
- CVE-2017-13731: Fix illegal address access in the function postprocess_termcap() (bsc#1056129).
- References
-
- https://www.suse.com/support/update/announcement/2018/suse-su-20180120-1/
- https://bugzilla.suse.com/1056127
- https://bugzilla.suse.com/1056128
- https://bugzilla.suse.com/1056129
- https://bugzilla.suse.com/1056131
- https://bugzilla.suse.com/1056132
- https://bugzilla.suse.com/1056136
- https://www.suse.com/security/cve/CVE-2017-13728
- https://www.suse.com/security/cve/CVE-2017-13729
- https://www.suse.com/security/cve/CVE-2017-13730
- https://www.suse.com/security/cve/CVE-2017-13731
- https://www.suse.com/security/cve/CVE-2017-13732
- https://www.suse.com/security/cve/CVE-2017-13733
Affected packages
SUSE:Linux Enterprise Desktop 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2
SUSE:Linux Enterprise Desktop 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2
SUSE:Linux Enterprise Software Development Kit 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
SUSE:Linux Enterprise Software Development Kit 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
SUSE:Linux Enterprise Server 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-55.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-55.1",
"tack": "5.9-55.1",
"ncurses-devel-32bit": "5.9-55.1",
"terminfo": "5.9-55.1",
"terminfo-base": "5.9-55.1",
"libncurses6": "5.9-55.1",
"ncurses-devel": "5.9-55.1",
"ncurses-utils": "5.9-55.1",
"libncurses5-32bit": "5.9-55.1",
"libncurses5": "5.9-55.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-55.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-55.1",
"tack": "5.9-55.1",
"ncurses-devel-32bit": "5.9-55.1",
"terminfo": "5.9-55.1",
"terminfo-base": "5.9-55.1",
"libncurses6": "5.9-55.1",
"ncurses-devel": "5.9-55.1",
"ncurses-utils": "5.9-55.1",
"libncurses5-32bit": "5.9-55.1",
"libncurses5": "5.9-55.1"
}
]
}
SUSE:Linux Enterprise Server 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-55.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-55.1",
"tack": "5.9-55.1",
"ncurses-devel-32bit": "5.9-55.1",
"terminfo": "5.9-55.1",
"terminfo-base": "5.9-55.1",
"libncurses6": "5.9-55.1",
"ncurses-devel": "5.9-55.1",
"ncurses-utils": "5.9-55.1",
"libncurses5-32bit": "5.9-55.1",
"libncurses5": "5.9-55.1"
}
]
}
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 / ncurses
Package
- Name
- ncurses
- Purl
- purl:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.9-55.1
Ecosystem specific
{
"binaries": [
{
"libncurses6-32bit": "5.9-55.1",
"tack": "5.9-55.1",
"ncurses-devel-32bit": "5.9-55.1",
"terminfo": "5.9-55.1",
"terminfo-base": "5.9-55.1",
"libncurses6": "5.9-55.1",
"ncurses-devel": "5.9-55.1",
"ncurses-utils": "5.9-55.1",
"libncurses5-32bit": "5.9-55.1",
"libncurses5": "5.9-55.1"
}
]
}