{"id":"CLSA-2024-1710789286","summary":"ncurses: Fix of 2 CVEs","details":"- CVE-2023-29491.patch: Mitigate vulnerability by building the packages with\n  modified --disable-root-environ option which now limits usage of environment\n  for setuid/setgid programs only\n- CVE-2021-39537.patch: Add a check for end-of-string in cvtchar to handle a\n  malformed string in infotocap","modified":"2026-05-27T11:36:16.284381556Z","published":"2024-03-18T19:14:50Z","upstream":["CVE-2021-39537","CVE-2023-29491"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/centos7-els/CLSA-2024-1710789286.html"}],"affected":[{"package":{"name":"ncurses","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ncurses?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1710789286.json"}},{"package":{"name":"ncurses-base","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ncurses-base?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1710789286.json"}},{"package":{"name":"ncurses-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ncurses-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1710789286.json"}},{"package":{"name":"ncurses-libs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ncurses-libs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1710789286.json"}},{"package":{"name":"ncurses-static","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ncurses-static?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1710789286.json"}},{"package":{"name":"ncurses-term","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/ncurses-term?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9-14.20130511.el7_4.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2024-1710789286.json"}}],"schema_version":"1.7.5"}