Security update for ncurses
This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-11112: Illegal address access in append_acs. (bsc#1047964) - CVE-2017-11113: Dereferencing NULL pointer in _nc_parse_entry. (bsc#1047965) - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avoid broken termcap format (bsc#1046853, bsc#1046858, bsc#1049344)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for ncurses fixes the following issues: Security issues fixed: - CVE-2017-11112: Illegal address access in append_acs. (bsc#1047964) - CVE-2017-11113: Dereferencing NULL pointer in _nc_parse_entry. (bsc#1047965) - CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avoid broken termcap format (bsc#1046853, bsc#1046858, bsc#1049344)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1046853
- https://bugzilla.suse.com/1046858
- https://bugzilla.suse.com/1047964
- https://bugzilla.suse.com/1047965
- https://bugzilla.suse.com/1049344
- https://www.suse.com/security/cve/CVE-2017-10684
- https://www.suse.com/security/cve/CVE-2017-10685
- https://www.suse.com/security/cve/CVE-2017-11112
- https://www.suse.com/security/cve/CVE-2017-11113
- https://www.suse.com/support/update/announcement/2017/suse-su-20172076-1/