Security update for ncurses
This update for ncurses fixes the following issues:
Security issues fixed:
- CVE-2019-17594: Fixed a heap-based buffer over-read in the _nc_find_entry function (bsc#1154036).
- CVE-2019-17595: Fixed a heap-based buffer over-read in the fmt_entry function (bsc#1154037).
Non-security issue fixed:
- Removed screen.xterm from terminfo database (bsc#1103320).
This update was imported from the SUSE:SLE-15:Update update project.
-
Submitted by
Dr. Werner Fink (WernerFink)
Fixed bugs
bnc#1154037
VUL-0: CVE-2019-17595: ncurses: heap-based buffer over-read in fmt_entry function in tinfo/comp_hash.c
bnc#1103320
screen running with TERM=screen.xterm is broken
bnc#1154036
VUL-0: CVE-2019-17594: ncurses: heap-based buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
