UbuntuUpdates.org

Package "libtinfo6"

Name: libtinfo6

Description:

shared low-level terminfo library for terminal handling
Latest version: 6.4+20240113-1ubuntu2.1
Release: noble (24.04)
Level: security
Repository: main
Head package: ncurses
Homepage: https://invisible-island.net/ncurses/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libtinfo6"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libtinfo6" in Noble

Repository Area Version
base main 6.4+20240113-1ubuntu2

Changelog

Version: 6.4+20240113-1ubuntu2.1 2026-07-02 17:07:32 UTC

  ncurses (6.4+20240113-1ubuntu2.1) noble-security; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow in infocmp
    - debian/patches/CVE-2025-69720.patch: clamp length to
      MAX_TERMINFO_LENGTH before copying into buf2 in analyze_string.
    - CVE-2025-69720

 -- Paulo Flabiano Smorigo <email address hidden> Tue, 30 Jun 2026 21:25:29 +0000
CVE-2025-69720 The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.


About   -   Send Feedback to @ubuntu_updates