UbuntuUpdates.org

Package "ncurses"

Name: ncurses

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • developer's libraries for ncurses (32-bit)
  • shared libraries for terminal handling (32-bit)
  • shared libraries for terminal handling (wide character support) (32-bit)
  • shared low-level terminfo library for terminal handling (32-bit)
Latest version: 6.4+20240113-1ubuntu2.2
Release: noble (24.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "ncurses" in Noble

Repository Area Version
base main 6.4+20240113-1ubuntu2
updates main 6.4+20240113-1ubuntu2.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 6.4+20240113-1ubuntu2.2 2026-09-01 16:07:40 UTC

ncurses (6.4+20240113-1ubuntu2.2) noble-security; urgency=medium

  * SECURITY UPDATE: Stack-based buffer overflow
    - debian/patches/CVE-2025-6141.patch: add a buffer-limit check in
      postprocess_termcap in ncurses/tinfo/parse_entry.c.
    - CVE-2025-6141

 -- John Breton Mon, 31 Aug 2026 07:36:06 -0400
Source diff to previous version
CVE-2025-6141 A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocess_t

Version: 6.4+20240113-1ubuntu2.1 2026-07-02 17:07:32 UTC

  ncurses (6.4+20240113-1ubuntu2.1) noble-security; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow in infocmp
    - debian/patches/CVE-2025-69720.patch: clamp length to
      MAX_TERMINFO_LENGTH before copying into buf2 in analyze_string.
    - CVE-2025-69720

 -- Paulo Flabiano Smorigo <email address hidden> Tue, 30 Jun 2026 21:25:29 +0000
CVE-2025-69720 The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.


About   -   Send Feedback to @ubuntu_updates