Ubuntu
ncurses package

ncurses 6.1-1ubuntu1.18.04.1 source package in Ubuntu

Changelog

ncurses (6.1-1ubuntu1.18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow in the _nc_find_entry function
    - debian/patches/CVE-2019-17594.patch: check for invalid hashcode in
      _nc_find_type_entry and _nc_find_entry.
    - CVE-2019-17594.patch
  * SECURITY UPDATE: heap buffer overflow in the fmt_entry function
    - debian/patches/CVE-2019-17595.patch: check for missing character after
      backslash in fmt_entry.
    - CVE-2019-17595
  * SECURITY UPDATE: heap buffer overflow in the _nc_captoinfo function
    - debian/patches/CVE-2021-39537.patch: add a check for end-of-string in
      cvtchar to handle a malformed string in infotocap.
    - CVE-2021-39537
  * SECURITY UPDATE: out-of-bounds read in the convert_strings function
    - debian/patches/CVE-2022-29458.patch:add a limit-check to guard against
      corrupt terminfo data.
    - CVE-2022-29458
  * SECURITY UPDATE: memory corruption when processing malformed terminfo data
    entries loaded by setuid/setgid programs
    - debian/patches/CVE-2023-29491-mitigation.patch: change the
      --disable-root-environ configure option behavior.
    - debian/rules: set --disable-root-environ in configuration options.
    - debian/libtinfo5.symbols: add _nc_env_access to symbols files.
    - CVE-2023-29491
  * debian/patches/fix-off-by-one-loop-convert-strings.patch: correct an
    off-by-one loop-limit in convert_strings function.
  * debian/patches/fix-tic-infloop.diff: modify tic to exit if it cannot
    remove a conflicting name.
  * debian/patches/fix-write_it.diff: check for missing character after
    backslash in write_it.

 -- Camila Camargo de Matos <email address hidden>  Tue, 16 May 2023 15:54:45 -0300

Upload details

Uploaded by:
Camila Camargo de Matos
Uploaded to:
Bionic
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates main libs
Bionic security main libs

Downloads

File Size SHA-256 Checksum
ncurses_6.1.orig.tar.gz 3.2 MiB aa057eeeb4a14d470101eff4597d5833dcef5965331be3528c08d99cebaa0d17
ncurses_6.1.orig.tar.gz.asc 251 bytes 47fd6ab5c2b08758f9c372c2bb75f2f0dbcd5cf58ae30b08f791a903da0259a4
ncurses_6.1-1ubuntu1.18.04.1.debian.tar.xz 59.5 KiB 236861afde30dcdf1c70b1171fb4e83887919e0ac1651945cd15745abc832067
ncurses_6.1-1ubuntu1.18.04.1.dsc 4.3 KiB 7b07b5e565bb028639dff35236eea5d7f2887de8ab49ab3e422605ee9d10569c

View changes file

Binary packages built by this source

lib32ncurses5: shared libraries for terminal handling (32-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared libraries necessary to run programs
 compiled with ncurses.
 .
 This package supports the 32-bit ABI variant of your system's
 architecture.

lib32ncurses5-dbgsym: debug symbols for lib32ncurses5
lib32ncurses5-dev: developer's libraries for ncurses (32-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the header files, static libraries
 and symbolic links that developers using ncurses will need.
 .
 This package supports the 32-bit ABI variant of your system's
 architecture.

lib32ncursesw5: shared libraries for terminal handling (wide character support) (32-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared libraries necessary to run programs
 compiled with ncursesw, which includes support for wide characters.
 .
 This package supports the 32-bit ABI variant of your system's
 architecture.

lib32ncursesw5-dbgsym: debug symbols for lib32ncursesw5
lib32ncursesw5-dev: developer's libraries for ncursesw (32-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the header files, static libraries
 and symbolic links that developers using ncursesw will need.
 .
 This package includes support for wide characters.
 This package supports the 32-bit ABI variant of your system's
 architecture.

lib32tinfo-dev: developer's library for the low-level terminfo library (32-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the static library and symbolic link that developers
 using the low-level terminfo library will need. Packages should not
 build-depend on this package.
 .
 This package supports the 32-bit ABI variant of your system's architecture.

lib32tinfo5: shared low-level terminfo library for terminal handling (32-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared low-level terminfo library.
 .
 This package supports the 32-bit ABI variant of your system's architecture.

lib32tinfo5-dbgsym: debug symbols for lib32tinfo5
lib64ncurses5: shared libraries for terminal handling (64-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared libraries necessary to run programs
 compiled with ncurses.
 .
 This package supports the 64-bit ABI variant of your system's
 architecture.

lib64ncurses5-dbgsym: debug symbols for lib64ncurses5
lib64ncurses5-dev: developer's libraries for ncurses (64-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the header files, static libraries
 and symbolic links that developers using ncurses will need.
 .
 This package supports the 64-bit ABI variant of your system's
 architecture.

lib64tinfo5: shared low-level terminfo library for terminal handling (64-bit)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared low-level terminfo library.
 .
 This package supports the 64-bit ABI variant of your system's architecture.

lib64tinfo5-dbgsym: debug symbols for lib64tinfo5
libncurses5: shared libraries for terminal handling

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared libraries necessary to run programs
 compiled with ncurses.

libncurses5-dbg: debugging/profiling libraries for ncurses

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains special library versions of ncurses suitable
 for debugging and profiling. Also included are detached debugging
 symbols for libncurses5.

libncurses5-dev: developer's libraries for ncurses

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the header files, static libraries
 and symbolic links that developers using ncurses will need.

libncursesw5: shared libraries for terminal handling (wide character support)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared libraries necessary to run programs
 compiled with ncursesw, which includes support for wide characters.

libncursesw5-dbg: debugging/profiling libraries for ncursesw

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains special library versions of ncursesw suitable
 for debugging and profiling. Also included are detached debugging
 symbols for libncursesw5.
 .
 This package includes support for wide characters.

libncursesw5-dev: developer's libraries for ncursesw

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the header files, static libraries
 and symbolic links that developers using ncursesw will need.
 .
 This package includes support for wide characters.

libtinfo-dev: developer's library for the low-level terminfo library

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the static library and symbolic link that developers
 using the low-level terminfo library will need. Packages should not
 build-depend on this package.

libtinfo5: shared low-level terminfo library for terminal handling

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared low-level terminfo library.

libtinfo5-dbg: debugging/profiling library for the low-level terminfo library

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains a special library version of the low-level terminfo
 library suitable for debugging and profiling. Also included are detached
 debugging symbols for libtinfo5.

libtinfo5-udeb: shared low-level terminfo library for terminal handling - udeb

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the stripped-down udeb version of shared low-level
 terminfo library.

libx32ncurses5: shared libraries for terminal handling (x32)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared libraries necessary to run programs
 compiled with ncurses.
 .
 This package supports the x32 ABI variant of your system's
 architecture.

libx32ncurses5-dbgsym: debug symbols for libx32ncurses5
libx32ncurses5-dev: developer's libraries for ncurses (x32)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the header files, static libraries
 and symbolic links that developers using ncurses will need.
 .
 This package supports the x32 ABI variant of your system's
 architecture.

libx32ncursesw5: shared libraries for terminal handling (wide character support) (x32)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared libraries necessary to run programs
 compiled with ncursesw, which includes support for wide characters.
 .
 This package supports the x32 ABI variant of your system's
 architecture.

libx32ncursesw5-dbgsym: debug symbols for libx32ncursesw5
libx32ncursesw5-dev: developer's libraries for ncursesw (x32)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the header files, static libraries
 and symbolic links that developers using ncursesw will need.
 .
 This package includes support for wide characters.
 This package supports the x32 ABI variant of your system's
 architecture.

libx32tinfo-dev: developer's library for the low-level terminfo library (x32)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the static library and symbolic link that developers
 using the low-level terminfo library will need. Packages should not
 build-depend on this package.
 .
 This package supports the x32 ABI variant of your system's architecture.

libx32tinfo5: shared low-level terminfo library for terminal handling (x32)

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the shared low-level terminfo library.
 .
 This package supports the x32 ABI variant of your system's architecture.

libx32tinfo5-dbgsym: debug symbols for libx32tinfo5
ncurses-base: basic terminal type definitions

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains terminfo data files to support the most common types of
 terminal, including ansi, dumb, linux, rxvt, screen, sun, vt100, vt102, vt220,
 vt52, and xterm.

ncurses-bin: terminal-related programs and man pages

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains the programs used for manipulating the terminfo
 database and individual terminfo entries, as well as some programs for
 resetting terminals and such.

ncurses-bin-dbgsym: debug symbols for ncurses-bin
ncurses-doc: developer's guide and documentation for ncurses

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains an introduction to writing programs with
 ncurses a guide to the internals of the ncurses library. It also
 includes the libraries' man pages.
 .
 Non-developers likely have little use for this package.

ncurses-examples: test programs and examples for ncurses

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains programs demonstrating the possibilities of
 ncurses and testing the library. The examples include an
 analog/digital clock and several classic programs such as solitaire,
 battleships, a knight's tour on a chess board, the towers of Hanoi
 and several others.

ncurses-examples-dbgsym: debug symbols for ncurses-examples
ncurses-term: additional terminal type definitions

 The ncurses library routines are a terminal-independent method of
 updating character screens with reasonable optimization.
 .
 This package contains all of the numerous terminal definitions not found in
 the ncurses-base package.