Updated ncurses packages fix security vulnerability
Publication date: 15 Mar 2024Modification date: 15 Mar 2024
Type: security
Affected Mageia releases : 9
CVE: CVE-2023-29491
Description
The updated packages fix a security vulnerability: Local users can trigger security-relevant memory corruption via malformed data. (CVE-2023-29491)
References
- https://bugs.mageia.org/show_bug.cgi?id=31792
- https://www.openwall.com/lists/oss-security/2023/04/12/5
- https://lists.suse.com/pipermail/sle-security-updates/2023-May/014766.html
- https://ubuntu.com/security/notices/USN-6099-1
- https://lwn.net/Articles/952268/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29491
SRPMS
9/core
- ncurses-6.3-20221203.2.1.mga9