Format: 1.8 Date: Tue, 16 May 2023 15:47:48 -0300 Source: ncurses Binary: libncurses-dev libncurses5 libncurses5-dev libncurses6 libncursesw5 libncursesw5-dev libncursesw6 libtinfo-dev libtinfo5 libtinfo6 libtinfo6-udeb ncurses-bin ncurses-examples Architecture: arm64 Version: 6.2-0ubuntu2.1 Distribution: focal Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Camila Camargo de Matos Description: libncurses-dev - developer's libraries for ncurses libncurses5 - shared libraries for terminal handling (legacy version) libncurses5-dev - transitional package for libncurses-dev libncurses6 - shared libraries for terminal handling libncursesw5 - shared libraries for terminal handling (wide character legacy ver libncursesw5-dev - transitional package for libncurses-dev libncursesw6 - shared libraries for terminal handling (wide character support) libtinfo-dev - transitional package for libncurses-dev libtinfo5 - shared low-level terminfo library (legacy version) libtinfo6 - shared low-level terminfo library for terminal handling libtinfo6-udeb - shared low-level terminfo library for terminal handling - udeb (udeb) ncurses-bin - terminal-related programs and man pages ncurses-examples - test programs and examples for ncurses Changes: ncurses (6.2-0ubuntu2.1) focal-security; urgency=medium . * SECURITY UPDATE: heap buffer overflow in the _nc_captoinfo function - debian/patches/CVE-2021-39537.patch: add a check for end-of-string in cvtchar to handle a malformed string in infotocap. - CVE-2021-39537 * SECURITY UPDATE: out-of-bounds read in the convert_strings function - debian/patches/CVE-2022-29458.patch:add a limit-check to guard against corrupt terminfo data. - CVE-2022-29458 * SECURITY UPDATE: memory corruption when processing malformed terminfo data entries loaded by setuid/setgid programs - debian/patches/CVE-2023-29491-mitigation.patch: change the --disable-root-environ configure option behavior. - debian/rules: set --disable-root-environ in configuration options. - debian/libtinfo5.symbols, debian/libtinfo6.symbols: add _nc_env_access to symbols files. - CVE-2023-29491 * debian/patches/fix-off-by-one-loop-convert-strings.patch: correct an off-by-one loop-limit in convert_strings function. Checksums-Sha1: e8333af47a7259e113e566e3ead0bf5be2226f27 327088 libncurses-dev_6.2-0ubuntu2.1_arm64.deb 7894978bbbc19f6b0b08835a4acf8b5266117fb2 264920 libncurses5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 346aa5a4c369570879a92f8e975b8d660e888f18 984 libncurses5-dev_6.2-0ubuntu2.1_arm64.deb d66db7b6832095a2deb8ed1eb7f0eb13da54d84d 87652 libncurses5_6.2-0ubuntu2.1_arm64.deb 421db47bd8ec778739af5b2609ff3eadcad5e92e 288596 libncurses6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 67a81a4be475aa9ea3c07c2848ddfdc8097bda7b 91848 libncurses6_6.2-0ubuntu2.1_arm64.deb 6324c575583699da8b9a188dd9e018c05047b260 321920 libncursesw5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 20a429e19f323843abdf900fe3681494296ca4dd 988 libncursesw5-dev_6.2-0ubuntu2.1_arm64.deb 8511f2dc07b7369cabc9a17a62edc7a1c07c6eb3 108452 libncursesw5_6.2-0ubuntu2.1_arm64.deb f8a437e2a2dfff155a8c78d5c10dae4949cec2e2 361512 libncursesw6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 41dbd9f6bc23d5bf95f074e9601a61a22785777c 120268 libncursesw6_6.2-0ubuntu2.1_arm64.deb b8e013081024e248ce15b14469b438c988d6b2d0 972 libtinfo-dev_6.2-0ubuntu2.1_arm64.deb 60fc85c4f03b49fe88fbbb87bfc412ea5e73b814 169668 libtinfo5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb de49943b03c585015e3494543f40cd6a37218a4b 77696 libtinfo5_6.2-0ubuntu2.1_arm64.deb c7c490bf58bb61e08557c22220798dfa51b69bcd 180340 libtinfo6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb ec23eae5ad9fe5764791c263cfb0c78a27689e49 50588 libtinfo6-udeb_6.2-0ubuntu2.1_arm64.udeb 3727d5764732bbd415c45c19109be3174cee8bb0 82064 libtinfo6_6.2-0ubuntu2.1_arm64.deb d4fe52741dc608c800fceb281f2f55fe2ef63ee2 179512 ncurses-bin-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 829be32e9632faebcf509ba51c847a4c0c1806b2 167160 ncurses-bin_6.2-0ubuntu2.1_arm64.deb eef42fa107b6c54192603854381df505555b8e6c 621220 ncurses-examples-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 1b50149716876dde1cacf36e5d73521c339a3a21 251564 ncurses-examples_6.2-0ubuntu2.1_arm64.deb d79483eb3a12dcc39d09cf22469279abc44fcceb 11319 ncurses_6.2-0ubuntu2.1_arm64.buildinfo Checksums-Sha256: c87b50f31be48c8e4814899ebd8912cb8a9f83f6d062dbbb6b721547e347b2ac 327088 libncurses-dev_6.2-0ubuntu2.1_arm64.deb 853f713feb0eb3e6ac1873b6fe98d0b79b0683e330fb413b7a98495cc1a22fa3 264920 libncurses5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb c3d61366d3c4076d1099cc0c34d43e8fc6673204061416917ee2b0663affaed1 984 libncurses5-dev_6.2-0ubuntu2.1_arm64.deb 0dff470daea65b17cf2063dc69d4d53153440474f797da1e8dab8d8ef747a39b 87652 libncurses5_6.2-0ubuntu2.1_arm64.deb e02397bec9d55a1788a81404ebb498001fd0156495e96123c397768097b53f92 288596 libncurses6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb fa7e3f2a126b74aa9020fb6cec0bf1cd819e8751f4e5998efafb5299ea91ea65 91848 libncurses6_6.2-0ubuntu2.1_arm64.deb 74722fbb8aca04b6f3216c33ce8f0b4fccc556aa152bd959f403f0b3f2913f97 321920 libncursesw5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 64f5550ad0e88bb20c7d5f7a04ffbff6bb7877e64513f267c9a53571647091d6 988 libncursesw5-dev_6.2-0ubuntu2.1_arm64.deb 5ed50f6de07bd00bd069a467c0d650c9452fef834471145b16cdf12b931ec6aa 108452 libncursesw5_6.2-0ubuntu2.1_arm64.deb d6933543b8ffdc99f1aa70d3da76f8636328b57145f78cf365164a8c611b13d8 361512 libncursesw6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 0fe748c325a1727cda8f6f8bf931b1fb7f96e8205ce4ab767f24eec5593fa9fd 120268 libncursesw6_6.2-0ubuntu2.1_arm64.deb 41b01d18d80615f3362d476b3e5fae5e1175c0c3be3365bbf5c9a642aa8a8efb 972 libtinfo-dev_6.2-0ubuntu2.1_arm64.deb aa954ff2ab4c781f6c6a39ad3890da1a55effca10504add313ccc64754cd798a 169668 libtinfo5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb ec1a5f1aa9a3851b5ab4183f1ede854363a1ef5572017b305403da74b0b5b3ff 77696 libtinfo5_6.2-0ubuntu2.1_arm64.deb c04b1a9df6f2179f01c1d5bc570aedf55177f354f20ea08e57ce1269519fd02f 180340 libtinfo6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 89f7ce4878ec786a2e4dc4c32ac88a3299c9d3da0140742e1d17e2f83080d116 50588 libtinfo6-udeb_6.2-0ubuntu2.1_arm64.udeb 1231273008aecf90179bfc38fb1906f109224e64ade5ecf03e8a58800b51f2c1 82064 libtinfo6_6.2-0ubuntu2.1_arm64.deb 9abcb8e1c8a8f63dfcad269080c79b7984b212bbe2d1cb757d2fdbe28096efe7 179512 ncurses-bin-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 7ca0ceba1761fd39567fb5977f6613ef808307c7d268fc17f7375217f08a0c7d 167160 ncurses-bin_6.2-0ubuntu2.1_arm64.deb f3b7ef996e2f2c7d77c0281a1ec793d5f5938d831fc3190edc0ef94f3a8b7152 621220 ncurses-examples-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 3791ab1c87a30f528eb96c2082709788c05e7874b8e680cabfdbac0d53e6d631 251564 ncurses-examples_6.2-0ubuntu2.1_arm64.deb 0dc11af2bc5782f0116849de77260c5090d060689ea084eef01acc66a0561afa 11319 ncurses_6.2-0ubuntu2.1_arm64.buildinfo Files: aa5ab81154e6015bf1c37ce6d1d64a23 327088 libdevel optional libncurses-dev_6.2-0ubuntu2.1_arm64.deb 6621d732ee22610e1ad719133fff5420 264920 debug optional libncurses5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 4cf9a7adbf772c06f9763cac5f2ee337 984 oldlibs optional libncurses5-dev_6.2-0ubuntu2.1_arm64.deb a2c6b452225a277a6e005e798d33d562 87652 oldlibs optional libncurses5_6.2-0ubuntu2.1_arm64.deb ca0073238684d5c48c14702022f4398f 288596 debug optional libncurses6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 7115d7dbfb167792f2af254ab3d9e4ce 91848 libs optional libncurses6_6.2-0ubuntu2.1_arm64.deb 5e121492981be4f5b4729fc7a3adb842 321920 debug optional libncursesw5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb cd6b31e98f9e25eba4ac5b3d75cd905c 988 oldlibs optional libncursesw5-dev_6.2-0ubuntu2.1_arm64.deb fac4bd92fba7bc9239e0a4a7eabfce5c 108452 oldlibs optional libncursesw5_6.2-0ubuntu2.1_arm64.deb 3cbf89bb093a223ef43c2fa7f73765da 361512 debug optional libncursesw6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb 4d00bd890b8a5529e31b41a9f281f50b 120268 libs optional libncursesw6_6.2-0ubuntu2.1_arm64.deb 1dd86376f9c5e693cb7f3c7784b94db2 972 oldlibs optional libtinfo-dev_6.2-0ubuntu2.1_arm64.deb 198b626ac50a879665ef369bd361d84a 169668 debug optional libtinfo5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb a1881ab4119e1bb9a2a28435ff3da420 77696 oldlibs optional libtinfo5_6.2-0ubuntu2.1_arm64.deb d2b7069ea89fb4e0bfc5b175d2d5009d 180340 debug optional libtinfo6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb ea690a17709da9f6453acadcb29e4a8b 50588 debian-installer optional libtinfo6-udeb_6.2-0ubuntu2.1_arm64.udeb 2bb810f677aeb9365ca7aac52ecb034a 82064 libs optional libtinfo6_6.2-0ubuntu2.1_arm64.deb cb9a49c4a68d2e9271434d7eac91fed5 179512 debug optional ncurses-bin-dbgsym_6.2-0ubuntu2.1_arm64.ddeb f624d5ebb99da7ded5f3773288d50f48 167160 utils required ncurses-bin_6.2-0ubuntu2.1_arm64.deb 68bfe07109b98b13224fc10d5f2acfd4 621220 debug optional ncurses-examples-dbgsym_6.2-0ubuntu2.1_arm64.ddeb b572020aa138a4e6be85e6535bbd51b2 251564 misc optional ncurses-examples_6.2-0ubuntu2.1_arm64.deb 96230addc258affc90ddbad868de01f7 11319 libs required ncurses_6.2-0ubuntu2.1_arm64.buildinfo Original-Maintainer: Craig Small