Bug#1034372: ncurses: CVE-2023-29491

2023-05-01 Thread Sven Joachim
On 2023-04-23 08:47 +0200, Sven Joachim wrote: > On 2023-04-18 20:15 -0400, Thomas Dickey wrote: > >> On Sat, Apr 15, 2023 at 07:27:45AM -0400, Thomas Dickey wrote: >>> On Sat, Apr 15, 2023 at 09:05:25AM +0200, Sven Joachim wrote: >>> > >>> > Security boundaries are only crossed for

Bug#1034372: ncurses: CVE-2023-29491

2023-04-23 Thread Sven Joachim
On 2023-04-18 20:15 -0400, Thomas Dickey wrote: > On Sat, Apr 15, 2023 at 07:27:45AM -0400, Thomas Dickey wrote: >> On Sat, Apr 15, 2023 at 09:05:25AM +0200, Sven Joachim wrote: >> > >> > Security boundaries are only crossed for setuid/setgid programs here, >> > and we probably do not have many

Bug#1034372: ncurses: CVE-2023-29491

2023-04-18 Thread Thomas Dickey
On Sat, Apr 15, 2023 at 07:27:45AM -0400, Thomas Dickey wrote: > On Sat, Apr 15, 2023 at 09:05:25AM +0200, Sven Joachim wrote: > > On 2023-04-13 20:39 +0200, Moritz Mühlenhoff wrote: > > > > > The following vulnerability was published for ncurses. > > > > > > CVE-2023-29491 was assigned to > > >

Bug#1034372: ncurses: CVE-2023-29491

2023-04-15 Thread Thomas Dickey
On Sat, Apr 15, 2023 at 09:05:25AM +0200, Sven Joachim wrote: > On 2023-04-13 20:39 +0200, Moritz Mühlenhoff wrote: > > > The following vulnerability was published for ncurses. > > > > CVE-2023-29491 was assigned to > > https://invisible-island.net/ncurses/NEWS.html#index-t20230408 > > > > If

Bug#1034372: ncurses: CVE-2023-29491

2023-04-15 Thread Sven Joachim
On 2023-04-13 20:39 +0200, Moritz Mühlenhoff wrote: > The following vulnerability was published for ncurses. > > CVE-2023-29491 was assigned to > https://invisible-island.net/ncurses/NEWS.html#index-t20230408 > > If you fix the vulnerability please also make sure to include the > CVE (Common

Bug#1034372: ncurses: CVE-2023-29491

2023-04-13 Thread Moritz Mühlenhoff
Source: ncurses X-Debbugs-CC: t...@security.debian.org Severity: important Tags: security Hi, The following vulnerability was published for ncurses. CVE-2023-29491 was assigned to https://invisible-island.net/ncurses/NEWS.html#index-t20230408 If you fix the vulnerability please also make sure