shield Security update for ncurses

SUSE-SLE-SDK-12-SP2-2018-209

This update for ncurses fixes several issues. These security issues were fixed: - CVE-2017-13734: Prevent illegal address access in the _nc_safe_strcat function in strings.c that might have lead to a remote denial of service attack (bsc#1056126). - CVE-2017-13733: Prevent illegal address access in the fmt_entry function in progs/dump_entry.c that might have lead to a remote denial of service attack (bsc#1056127). - CVE-2017-13732: Prevent illegal address access in the function dump_uses() in progs/dump_entry.c that might have lead to a remote denial of service attack (bsc#1056128). - CVE-2017-13731: Prevent illegal address access in the function postprocess_termcap() in parse_entry.c that might have lead to a remote denial of service attack (bsc#1056129). - CVE-2017-13730: Prevent illegal address access in the function _nc_read_entry_source() in progs/tic.c that might have lead to a remote denial of service attack (bsc#1056131). - CVE-2017-13729: Prevent illegal address access in the _nc_save_str function in alloc_entry.c that might have lead to a remote denial of service attack (bsc#1056132). - CVE-2017-13728: Prevent infinite loop in the next_char function in comp_scan.c that might have lead to a remote denial of service attack (bsc#1056136).

• Release Date
  Jan 30 2018
• References
  Bugzilla: 1056136, 1056126, 1056127, 1056132, 1056131, 1056128, 1056129
  CVEs: CVE-2017-13728, CVE-2017-13729, CVE-2017-13734, CVE-2017-13731, CVE-2017-13730, CVE-2017-13733, CVE-2017-13732
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Software Development Kit 12.2 ppc64le

• Packages
  ncurses
  New curses Libraries

  5.9-58.1 lock src

  ncurses-devel
  Include Files and Libraries mandatory for Development

  5.9-58.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 aarch64

• Packages
  ncurses
  New curses Libraries

  5.9-58.1 lock src

  ncurses-devel
  Include Files and Libraries mandatory for Development

  5.9-58.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 s390x

• Packages
  ncurses
  New curses Libraries

  5.9-58.1 lock src

  ncurses-devel
  Include Files and Libraries mandatory for Development

  5.9-58.1 lock rpm

SUSE Linux Enterprise Software Development Kit 12.2 x86_64

• Packages
  ncurses
  New curses Libraries

  5.9-58.1 lock src

  ncurses-devel
  Include Files and Libraries mandatory for Development

  5.9-58.1 lock rpm