diff --git a/.ncurses.metadata b/.ncurses.metadata new file mode 100644 index 0000000..47c4fe2 --- /dev/null +++ b/.ncurses.metadata @@ -0,0 +1,2 @@ +85c17000c002ace171fde9f0ee774d4f07819881 ncurses-6.2-20210508.tgz +237c2cca381e516b2716405235c9605b6fbbd569 ncurses-6.2-20210508.tgz.asc diff --git a/ncurses.spec b/ncurses.spec index 7c5d7e4..f6a1b87 100644 --- a/ncurses.spec +++ b/ncurses.spec @@ -2,7 +2,7 @@ Summary: Ncurses support utilities Name: ncurses Version: 6.2 -Release: 9.%{revision}%{?dist} +Release: 10.%{revision}%{?dist} License: MIT URL: https://invisible-island.net/ncurses/ncurses.html Source0: https://invisible-mirror.net/archives/ncurses/current/ncurses-%{version}-%{revision}.tgz @@ -286,6 +286,9 @@ xz NEWS %{_libdir}/lib*.a %changelog +* Mon Aug 21 2023 Miroslav Lichvar 6.2-10.20210508 +- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) + * Mon Aug 14 2023 Miroslav Lichvar 6.2-9.20210508 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666)