Security update for ncurses
This update for ncurses fixes the following issues:
Security issues fixed:
- CVE-2017-13728: Fix infinite loop in the next_char function in comp_scan.c (bsc#1056136).
- CVE-2017-13730: Fix illegal address access in the function _nc_read_entry_source() (bsc#1056131).
- CVE-2017-13733: Fix illegal address access in the fmt_entry function (bsc#1056127).
- CVE-2017-13729: Fix illegal address access in the _nc_save_str (bsc#1056132).
- CVE-2017-13732: Fix illegal address access in the function dump_uses() (bsc#1056128).
- CVE-2017-13731: Fix illegal address access in the function postprocess_termcap() (bsc#1056129).
This update was imported from the SUSE:SLE-12:Update update project.
-
Submitted by
Dr. Werner Fink (WernerFink)
Fixed bugs
bnc#1056136
VUL-0: CVE-2017-13728: ncurses: infinite loop in the next_char function in comp_scan.c
bnc#1056131
VUL-0: CVE-2017-13730: ncurses: illegal address access in the function _nc_read_entry_source()
bnc#1056127
VUL-0: CVE-2017-13733: ncurses: illegal address access in the fmt_entry function
bnc#1056132
VUL-0: CVE-2017-13729: ncurses: illegal address access in the _nc_save_str
bnc#1056128
VUL-0: CVE-2017-13732: ncurses: illegal address access in the function dump_uses()
bnc#1056129
VUL-0: CVE-2017-13731: ncurses: illegal address access in the function postprocess_termcap()
