Publishing details

• Published on 2023-05-23
• Copied from ubuntu focal in PPA for Ubuntu Security Proposed by Camila Camargo de Matos

Changelog

ncurses (6.2-0ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: heap buffer overflow in the _nc_captoinfo function
    - debian/patches/CVE-2021-39537.patch: add a check for end-of-string in
      cvtchar to handle a malformed string in infotocap.
    - CVE-2021-39537
  * SECURITY UPDATE: out-of-bounds read in the convert_strings function
    - debian/patches/CVE-2022-29458.patch:add a limit-check to guard against
      corrupt terminfo data.
    - CVE-2022-29458
  * SECURITY UPDATE: memory corruption when processing malformed terminfo data
    entries loaded by setuid/setgid programs
    - debian/patches/CVE-2023-29491-mitigation.patch: change the
      --disable-root-environ configure option behavior.
    - debian/rules: set --disable-root-environ in configuration options.
    - debian/libtinfo5.symbols, debian/libtinfo6.symbols: add _nc_env_access
      to symbols files.
    - CVE-2023-29491
  * debian/patches/fix-off-by-one-loop-convert-strings.patch: correct an
    off-by-one loop-limit in convert_strings function.

 -- Camila Camargo de Matos <email address hidden>  Tue, 16 May 2023 15:47:48 -0300

Builds

• amd64
• arm64
• armhf
• i386
• ppc64el
• riscv64
• s390x

Built packages

• lib32ncurses-dev developer's libraries for ncurses (32-bit)

• lib32ncurses6 shared libraries for terminal handling (32-bit)

• lib32ncurses6-dbgsym debug symbols for lib32ncurses6

• lib32ncursesw6 shared libraries for terminal handling (wide character support) (32-bit)

• lib32ncursesw6-dbgsym debug symbols for lib32ncursesw6

• lib32tinfo6 shared low-level terminfo library for terminal handling (32-bit)

• lib32tinfo6-dbgsym debug symbols for lib32tinfo6

• lib64ncurses-dev developer's libraries for ncurses (64-bit)

• lib64ncurses6 shared libraries for terminal handling (64-bit)

• lib64ncurses6-dbgsym debug symbols for lib64ncurses6

• lib64ncursesw6 shared libraries for terminal handling (wide character support) (64-bit)

• lib64ncursesw6-dbgsym debug symbols for lib64ncursesw6

• lib64tinfo6 shared low-level terminfo library for terminal handling (64-bit)

• lib64tinfo6-dbgsym debug symbols for lib64tinfo6

• libncurses-dev developer's libraries for ncurses

• libncurses5 shared libraries for terminal handling (legacy version)

• libncurses5-dbgsym debug symbols for libncurses5

• libncurses5-dev transitional package for libncurses-dev

• libncurses6 shared libraries for terminal handling

• libncurses6-dbgsym debug symbols for libncurses6

• libncursesw5 shared libraries for terminal handling (wide character legacy version)

• libncursesw5-dbgsym debug symbols for libncursesw5

• libncursesw5-dev transitional package for libncurses-dev

• libncursesw6 shared libraries for terminal handling (wide character support)

• libncursesw6-dbgsym debug symbols for libncursesw6

• libtinfo-dev transitional package for libncurses-dev

• libtinfo5 shared low-level terminfo library (legacy version)

• libtinfo5-dbgsym debug symbols for libtinfo5

• libtinfo6 shared low-level terminfo library for terminal handling

• libtinfo6-dbgsym debug symbols for libtinfo6

• libtinfo6-udeb shared low-level terminfo library for terminal handling - udeb

• ncurses-base basic terminal type definitions

• ncurses-bin terminal-related programs and man pages

• ncurses-bin-dbgsym debug symbols for ncurses-bin

• ncurses-doc developer's guide and documentation for ncurses

• ncurses-examples test programs and examples for ncurses

• ncurses-examples-dbgsym debug symbols for ncurses-examples

• ncurses-term additional terminal type definitions

Package files

• lib32ncurses-dev_6.2-0ubuntu2.1_amd64.deb (298.5 KiB)
• lib32ncurses6-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (248.0 KiB)
• lib32ncurses6_6.2-0ubuntu2.1_amd64.deb (105.1 KiB)
• lib32ncursesw6-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (312.7 KiB)
• lib32ncursesw6_6.2-0ubuntu2.1_amd64.deb (138.6 KiB)
• lib32tinfo6-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (160.2 KiB)
• lib32tinfo6_6.2-0ubuntu2.1_amd64.deb (85.1 KiB)
• lib64ncurses-dev_6.2-0ubuntu2.1_i386.deb (272.9 KiB)
• lib64ncurses6-dbgsym_6.2-0ubuntu2.1_i386.ddeb (280.4 KiB)
• lib64ncurses6_6.2-0ubuntu2.1_i386.deb (98.2 KiB)
• lib64ncursesw6-dbgsym_6.2-0ubuntu2.1_i386.ddeb (354.3 KiB)
• lib64ncursesw6_6.2-0ubuntu2.1_i386.deb (128.5 KiB)
• lib64tinfo6-dbgsym_6.2-0ubuntu2.1_i386.ddeb (176.0 KiB)
• lib64tinfo6_6.2-0ubuntu2.1_i386.deb (83.8 KiB)
• libncurses-dev_6.2-0ubuntu2.1_amd64.deb (331.7 KiB)
• libncurses-dev_6.2-0ubuntu2.1_arm64.deb (319.4 KiB)
• libncurses-dev_6.2-0ubuntu2.1_armhf.deb (294.0 KiB)
• libncurses-dev_6.2-0ubuntu2.1_i386.deb (357.6 KiB)
• libncurses-dev_6.2-0ubuntu2.1_ppc64el.deb (403.5 KiB)
• libncurses-dev_6.2-0ubuntu2.1_riscv64.deb (677.1 KiB)
• libncurses-dev_6.2-0ubuntu2.1_s390x.deb (309.5 KiB)
• libncurses5-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (258.5 KiB)
• libncurses5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (258.7 KiB)
• libncurses5-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (259.2 KiB)
• libncurses5-dbgsym_6.2-0ubuntu2.1_i386.ddeb (231.7 KiB)
• libncurses5-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (295.1 KiB)
• libncurses5-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (256.6 KiB)
• libncurses5-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (265.9 KiB)
• libncurses5-dev_6.2-0ubuntu2.1_amd64.deb (984 bytes)
• libncurses5-dev_6.2-0ubuntu2.1_arm64.deb (984 bytes)
• libncurses5-dev_6.2-0ubuntu2.1_armhf.deb (984 bytes)
• libncurses5-dev_6.2-0ubuntu2.1_i386.deb (980 bytes)
• libncurses5-dev_6.2-0ubuntu2.1_ppc64el.deb (984 bytes)
• libncurses5-dev_6.2-0ubuntu2.1_riscv64.deb (988 bytes)
• libncurses5-dev_6.2-0ubuntu2.1_s390x.deb (984 bytes)
• libncurses5_6.2-0ubuntu2.1_amd64.deb (94.6 KiB)
• libncurses5_6.2-0ubuntu2.1_arm64.deb (85.6 KiB)
• libncurses5_6.2-0ubuntu2.1_armhf.deb (74.4 KiB)
• libncurses5_6.2-0ubuntu2.1_i386.deb (100.1 KiB)
• libncurses5_6.2-0ubuntu2.1_ppc64el.deb (111.5 KiB)
• libncurses5_6.2-0ubuntu2.1_riscv64.deb (79.9 KiB)
• libncurses5_6.2-0ubuntu2.1_s390x.deb (87.4 KiB)
• libncurses6-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (284.5 KiB)
• libncurses6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (281.8 KiB)
• libncurses6-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (282.5 KiB)
• libncurses6-dbgsym_6.2-0ubuntu2.1_i386.ddeb (252.0 KiB)
• libncurses6-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (315.3 KiB)
• libncurses6-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (279.1 KiB)
• libncurses6-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (290.5 KiB)
• libncurses6_6.2-0ubuntu2.1_amd64.deb (98.9 KiB)
• libncurses6_6.2-0ubuntu2.1_arm64.deb (89.7 KiB)
• libncurses6_6.2-0ubuntu2.1_armhf.deb (77.8 KiB)
• libncurses6_6.2-0ubuntu2.1_i386.deb (105.9 KiB)
• libncurses6_6.2-0ubuntu2.1_ppc64el.deb (117.3 KiB)
• libncurses6_6.2-0ubuntu2.1_riscv64.deb (84.2 KiB)
• libncurses6_6.2-0ubuntu2.1_s390x.deb (92.0 KiB)
• libncursesw5-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (318.5 KiB)
• libncursesw5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (314.4 KiB)
• libncursesw5-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (316.6 KiB)
• libncursesw5-dbgsym_6.2-0ubuntu2.1_i386.ddeb (283.6 KiB)
• libncursesw5-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (352.2 KiB)
• libncursesw5-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (314.5 KiB)
• libncursesw5-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (324.0 KiB)
• libncursesw5-dev_6.2-0ubuntu2.1_amd64.deb (988 bytes)
• libncursesw5-dev_6.2-0ubuntu2.1_arm64.deb (988 bytes)
• libncursesw5-dev_6.2-0ubuntu2.1_armhf.deb (988 bytes)
• libncursesw5-dev_6.2-0ubuntu2.1_i386.deb (984 bytes)
• libncursesw5-dev_6.2-0ubuntu2.1_ppc64el.deb (984 bytes)
• libncursesw5-dev_6.2-0ubuntu2.1_riscv64.deb (988 bytes)
• libncursesw5-dev_6.2-0ubuntu2.1_s390x.deb (988 bytes)
• libncursesw5_6.2-0ubuntu2.1_amd64.deb (116.2 KiB)
• libncursesw5_6.2-0ubuntu2.1_arm64.deb (105.9 KiB)
• libncursesw5_6.2-0ubuntu2.1_armhf.deb (93.9 KiB)
• libncursesw5_6.2-0ubuntu2.1_i386.deb (125.2 KiB)
• libncursesw5_6.2-0ubuntu2.1_ppc64el.deb (133.5 KiB)
• libncursesw5_6.2-0ubuntu2.1_riscv64.deb (99.9 KiB)
• libncursesw5_6.2-0ubuntu2.1_s390x.deb (105.9 KiB)
• libncursesw6-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (358.3 KiB)
• libncursesw6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (353.0 KiB)
• libncursesw6-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (356.1 KiB)
• libncursesw6-dbgsym_6.2-0ubuntu2.1_i386.ddeb (317.1 KiB)
• libncursesw6-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (392.0 KiB)
• libncursesw6-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (349.1 KiB)
• libncursesw6-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (360.4 KiB)
• libncursesw6_6.2-0ubuntu2.1_amd64.deb (129.4 KiB)
• libncursesw6_6.2-0ubuntu2.1_arm64.deb (117.4 KiB)
• libncursesw6_6.2-0ubuntu2.1_armhf.deb (103.6 KiB)
• libncursesw6_6.2-0ubuntu2.1_i386.deb (139.3 KiB)
• libncursesw6_6.2-0ubuntu2.1_ppc64el.deb (149.1 KiB)
• libncursesw6_6.2-0ubuntu2.1_riscv64.deb (113.2 KiB)
• libncursesw6_6.2-0ubuntu2.1_s390x.deb (117.6 KiB)
• libtinfo-dev_6.2-0ubuntu2.1_amd64.deb (972 bytes)
• libtinfo-dev_6.2-0ubuntu2.1_arm64.deb (972 bytes)
• libtinfo-dev_6.2-0ubuntu2.1_armhf.deb (972 bytes)
• libtinfo-dev_6.2-0ubuntu2.1_i386.deb (968 bytes)
• libtinfo-dev_6.2-0ubuntu2.1_ppc64el.deb (976 bytes)
• libtinfo-dev_6.2-0ubuntu2.1_riscv64.deb (976 bytes)
• libtinfo-dev_6.2-0ubuntu2.1_s390x.deb (972 bytes)
• libtinfo5-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (168.1 KiB)
• libtinfo5-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (165.7 KiB)
• libtinfo5-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (161.6 KiB)
• libtinfo5-dbgsym_6.2-0ubuntu2.1_i386.ddeb (154.6 KiB)
• libtinfo5-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (200.7 KiB)
• libtinfo5-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (161.9 KiB)
• libtinfo5-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (168.1 KiB)
• libtinfo5_6.2-0ubuntu2.1_amd64.deb (81.4 KiB)
• libtinfo5_6.2-0ubuntu2.1_arm64.deb (75.9 KiB)
• libtinfo5_6.2-0ubuntu2.1_armhf.deb (68.8 KiB)
• libtinfo5_6.2-0ubuntu2.1_i386.deb (82.0 KiB)
• libtinfo5_6.2-0ubuntu2.1_ppc64el.deb (95.4 KiB)
• libtinfo5_6.2-0ubuntu2.1_riscv64.deb (73.7 KiB)
• libtinfo5_6.2-0ubuntu2.1_s390x.deb (77.5 KiB)
• libtinfo6-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (177.7 KiB)
• libtinfo6-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (176.1 KiB)
• libtinfo6-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (171.7 KiB)
• libtinfo6-dbgsym_6.2-0ubuntu2.1_i386.ddeb (162.3 KiB)
• libtinfo6-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (215.0 KiB)
• libtinfo6-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (171.0 KiB)
• libtinfo6-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (168.0 KiB)
• libtinfo6-udeb_6.2-0ubuntu2.1_amd64.udeb (52.3 KiB)
• libtinfo6-udeb_6.2-0ubuntu2.1_arm64.udeb (49.4 KiB)
• libtinfo6-udeb_6.2-0ubuntu2.1_armhf.udeb (42.7 KiB)
• libtinfo6-udeb_6.2-0ubuntu2.1_i386.udeb (52.3 KiB)
• libtinfo6-udeb_6.2-0ubuntu2.1_ppc64el.udeb (62.0 KiB)
• libtinfo6-udeb_6.2-0ubuntu2.1_riscv64.udeb (46.2 KiB)
• libtinfo6-udeb_6.2-0ubuntu2.1_s390x.udeb (49.9 KiB)
• libtinfo6_6.2-0ubuntu2.1_amd64.deb (85.4 KiB)
• libtinfo6_6.2-0ubuntu2.1_arm64.deb (80.1 KiB)
• libtinfo6_6.2-0ubuntu2.1_armhf.deb (72.5 KiB)
• libtinfo6_6.2-0ubuntu2.1_i386.deb (86.5 KiB)
• libtinfo6_6.2-0ubuntu2.1_ppc64el.deb (100.6 KiB)
• libtinfo6_6.2-0ubuntu2.1_riscv64.deb (77.6 KiB)
• libtinfo6_6.2-0ubuntu2.1_s390x.deb (81.3 KiB)
• ncurses-base_6.2-0ubuntu2.1_all.deb (18.5 KiB)
• ncurses-bin-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (176.3 KiB)
• ncurses-bin-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (175.3 KiB)
• ncurses-bin-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (170.2 KiB)
• ncurses-bin-dbgsym_6.2-0ubuntu2.1_i386.ddeb (163.6 KiB)
• ncurses-bin-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (217.8 KiB)
• ncurses-bin-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (169.5 KiB)
• ncurses-bin-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (165.2 KiB)
• ncurses-bin_6.2-0ubuntu2.1_amd64.deb (168.4 KiB)
• ncurses-bin_6.2-0ubuntu2.1_arm64.deb (163.2 KiB)
• ncurses-bin_6.2-0ubuntu2.1_armhf.deb (160.3 KiB)
• ncurses-bin_6.2-0ubuntu2.1_i386.deb (171.5 KiB)
• ncurses-bin_6.2-0ubuntu2.1_ppc64el.deb (175.8 KiB)
• ncurses-bin_6.2-0ubuntu2.1_riscv64.deb (162.0 KiB)
• ncurses-bin_6.2-0ubuntu2.1_s390x.deb (164.9 KiB)
• ncurses-doc_6.2-0ubuntu2.1_all.deb (656.0 KiB)
• ncurses-examples-dbgsym_6.2-0ubuntu2.1_amd64.ddeb (598.8 KiB)
• ncurses-examples-dbgsym_6.2-0ubuntu2.1_arm64.ddeb (606.7 KiB)
• ncurses-examples-dbgsym_6.2-0ubuntu2.1_armhf.ddeb (608.2 KiB)
• ncurses-examples-dbgsym_6.2-0ubuntu2.1_i386.ddeb (545.1 KiB)
• ncurses-examples-dbgsym_6.2-0ubuntu2.1_ppc64el.ddeb (733.0 KiB)
• ncurses-examples-dbgsym_6.2-0ubuntu2.1_riscv64.ddeb (595.1 KiB)
• ncurses-examples-dbgsym_6.2-0ubuntu2.1_s390x.ddeb (591.8 KiB)
• ncurses-examples_6.2-0ubuntu2.1_amd64.deb (265.2 KiB)
• ncurses-examples_6.2-0ubuntu2.1_arm64.deb (245.7 KiB)
• ncurses-examples_6.2-0ubuntu2.1_armhf.deb (236.7 KiB)
• ncurses-examples_6.2-0ubuntu2.1_i386.deb (272.4 KiB)
• ncurses-examples_6.2-0ubuntu2.1_ppc64el.deb (292.9 KiB)
• ncurses-examples_6.2-0ubuntu2.1_riscv64.deb (238.2 KiB)
• ncurses-examples_6.2-0ubuntu2.1_s390x.deb (255.3 KiB)
• ncurses-term_6.2-0ubuntu2.1_all.deb (243.4 KiB)
• ncurses_6.2-0ubuntu2.1.debian.tar.xz (62.1 KiB)
• ncurses_6.2-0ubuntu2.1.dsc (3.5 KiB)
• ncurses_6.2.orig.tar.gz (3.3 MiB)