[CLSA-2026:1792806631] ncurses: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-24 01:50:43 UTC
Description:
- CVE-2021-39537: fix heap buffer overflow in _nc_captoinfo() with a crafted termcap entry - CVE-2023-29491: ignore terminfo/termcap environment variables in setuid/setgid programs (--disable-root-environ)
Updated packages:
  • ncurses-5.7-4.20090207.el6.tuxcare.els1.i686.rpm
    sha:9fac2c9752d9a4a9cf34b087d8e513825f90e838c5860b8dd3f6be5f1a86730f
  • ncurses-5.7-4.20090207.el6.tuxcare.els1.x86_64.rpm
    sha:72a7f2cf07c454ffd95e4c13efee738ec78de6260474a1dc5fdff6b224bc7461
  • ncurses-base-5.7-4.20090207.el6.tuxcare.els1.i686.rpm
    sha:e73f9e36ff75b965b117ecf4db81ad5ae491e0cfe30f21a088c0a1e70cfe9603
  • ncurses-base-5.7-4.20090207.el6.tuxcare.els1.x86_64.rpm
    sha:0de3f4f00ef98453371a18c9354aeda88bbfcaf673b204c191f0ccb8ae72d151
  • ncurses-devel-5.7-4.20090207.el6.tuxcare.els1.i686.rpm
    sha:c25dfb88b502722a59c7edc19556639723e638856c4a89faa92bc40c8b35f1be
  • ncurses-devel-5.7-4.20090207.el6.tuxcare.els1.x86_64.rpm
    sha:eeba6dae77c60bce4bce2cb0f8c1ba43458cbb1b35bba9b7de6540daf4968144
  • ncurses-libs-5.7-4.20090207.el6.tuxcare.els1.i686.rpm
    sha:da10e907250f4be41111e7a8e84ec18841097886a22f9f00f0ac734c7aca8bb1
  • ncurses-libs-5.7-4.20090207.el6.tuxcare.els1.x86_64.rpm
    sha:cc1e1f9dee60bd4dcac580c54a875c34d1db1aa3aa90ab2143541f4941a00b07
  • ncurses-static-5.7-4.20090207.el6.tuxcare.els1.i686.rpm
    sha:6314774213121baebd69c81c8dc34b5d67bd5f6d6e03ed6fdbd91c081be857d5
  • ncurses-static-5.7-4.20090207.el6.tuxcare.els1.x86_64.rpm
    sha:6241059d7f2c9ccfc4874d59de0a8f0a013430fa51e73d524926c3a6dc4f83f5
  • ncurses-term-5.7-4.20090207.el6.tuxcare.els1.i686.rpm
    sha:9a721aceea57f2c2c0fe5e1fc2e6393879050713498d79240574491636f327e4
  • ncurses-term-5.7-4.20090207.el6.tuxcare.els1.x86_64.rpm
    sha:6abdc1a9b29fdb5c847be19c163b98967493b2140117e108a6568e249816cceb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.