From e2dd241f634820fa34822ba242be3df5da204b44 Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar Date: Thu, 26 Jun 2025 12:24:48 +0200 Subject: [PATCH] 6.2-11.20210508 Related: CVE-2022-29458 RHEL-100135 --- ncurses.spec | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/ncurses.spec b/ncurses.spec index 84c0119..f65827f 100644 --- a/ncurses.spec +++ b/ncurses.spec @@ -2,7 +2,7 @@ Summary: Ncurses support utilities Name: ncurses Version: 6.2 -Release: 10.%{revision}%{?dist} +Release: 11.%{revision}%{?dist} License: MIT URL: https://invisible-island.net/ncurses/ncurses.html Source0: https://invisible-mirror.net/archives/ncurses/current/ncurses-%{version}-%{revision}.tgz @@ -288,6 +288,10 @@ xz NEWS %{_libdir}/lib*.a %changelog +* Thu Jun 26 2025 Miroslav Lichvar 6.2-11.20210508 +- guard against corrupt terminfo data in string conversion (CVE-2022-29458 + RHEL-100135) + * Mon Aug 21 2023 Miroslav Lichvar 6.2-10.20210508 - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)