Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2023:1508-1 Moderate: Ncurses Memory Corruption Advisory

suse
Calendar Grey May 11, 2023
Dist Suse Esm H88
New releases for suse/sle15 have become available, featuring solutions for memory corruption issues within ncurses, alongside additional patches.
The container suse/sle15 was updated

Summary

Advisory ID: SUSE-RU-2023:2104-1 Released: Thu May 4 21:05:30 2023 Summary: Recommended update for procps Type: recommended Severity: moderate Advisory ID: SUSE-SU-2023:2111-1 Released: Fri May 5 14:34:00 2023 Summary: Security update for ncurses Type: security Severity: moderate Advisory ID: SUSE-RU-2023:2133-1 Released: Tue May 9 13:37:10 2023 Summary: Recommended update for zlib Type: recommended

Topics%20covered

Topics Covered

security advisory moderate ncurses memory issue suse patches container update

References

References : 1206513 1209122 1210434 CVE-2023-29491

1209122

This update for procps fixes the following issue:

- Allow - as leading character to ignore possible errors on systctl entries (bsc#1209122)

1210434,CVE-2023-29491

This update for ncurses fixes the following issues:

- CVE-2023-29491: Fixed memory corruption issues when processing malformed terminfo data (bsc#1210434).

1206513

This update for zlib fixes the following issues:

- Add DFLTCC support for using inflate() with a small window (bsc#1206513)

The following package changes have been done:

- libncurses6-6.1-150000.5.15.1 updated

- libprocps7-3.3.15-150000.7.31.1 updated

- libz1-1.2.11-150000.3.42.1 updated

- ncurses-utils-6.1-150000.5.15.1 updated

- procps-3.3.15-150000.7.31.1 updated

Container Advisory ID : SUSE-CU-2023:1508-1
Container Tags : bci/bci-base:15.3 , bci/bci-base:15.3.17.20.135 , suse/sle15:15.3 , suse/sle15:15.3.17.20.135
Container Release : 17.20.135
Severity : moderate
Type : security

Topics%20covered

Topics Covered

security advisory moderate ncurses memory issue suse patches container update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here