SUSE-SU-2023:4891-1: Security update for ncurses
This update for ncurses fixes the following issues: CVE-2023-50495: Fixed a segmentation fault via ncwrapentry() (bsc#1218014) Modify reset command to avoid altering clocal if the terminal uses a modem (bsc#1201384)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/libncurses6to a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/terminfo-baseto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses-utils-debuginfoto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/terminfoto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses-utilsto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/libncurses6-debuginfoto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses-debugsourceto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/libncurses6to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-6.1-150000.5.20.1 - Upgrade
Upgrade
suse/libncurses5to a version that resolves this vulnerability.Fixed in 32bit-debuginfo-6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses-develto a version that resolves this vulnerability.Fixed in 32bit-6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses-develto a version that resolves this vulnerability.Fixed in 32bit-debuginfo-6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses5-develto a version that resolves this vulnerability.Fixed in 32bit-6.1-150000.5.20.1 - Upgrade
Upgrade
suse/libncurses5to a version that resolves this vulnerability.Fixed in 32bit-6.1-150000.5.20.1 - Upgrade
Upgrade
suse/libncurses6to a version that resolves this vulnerability.Fixed in 32bit-6.1-150000.5.20.1 - Upgrade
Upgrade
suse/tack-debuginfoto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/terminfo-screento a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/libncurses5-debuginfoto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/libncurses5to a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses-develto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses-devel-debuginfoto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/ncurses5-develto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/terminfo-itermto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade
suse/tackto a version that resolves this vulnerability.Fixed in 6.1-150000.5.20.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.3-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.4-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Micro-5.5-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP4-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Development-Tools-15-SP5-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Legacy-15-SP4-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-Module-Legacy-15-SP5-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.1-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SUSE-MicroOS-5.2-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.3-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-Leap-Micro-5.4-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.4-2023-4891=1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch openSUSE-SLE-15.5-2023-4891=1
Event History
Frequently Asked Questions
Which installed packages are covered by this update?
The update covers libncurses6, libncurses5, terminfo-base, terminfo, ncurses-utils, ncurses-debugsource, ncurses-utils-debuginfo, libncurses6-debuginfo, and ncurses-utils-debuginfo.
What behavior is corrected besides the CVE fix?
The reset command was modified to avoid changing clocal when the terminal uses a modem.