Advisory ROSA-SA-2024-2364

Software: ncurses 6.1
OS: ROSA Virtualization 2.1

package_evr_string: ncurses-6.1-9.20180224.rv3

CVE-ID: CVE-2019-17594
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: There is a heap-based buffer enumeration in the _nc_find_entry function in tinfo/comp_hash.c in the terminfo library in ncurses.
CVE-STATUS: Fixed
CVE-REV: Run yum update ncurses to close it

CVE-ID: CVE-2019-17595
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: The fmt_entry function in tinfo/comp_hash.c of the terminfo library in ncurses has heap-based buffer enumeration.
CVE-STATUS: Fixed
CVE-REV: Run yum update ncurses to close it