]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
ncurses: patch CVE-2025-6141
authorPeter Marko <peter.marko@siemens.com>
Thu, 24 Jul 2025 22:12:29 +0000 (00:12 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 28 Jul 2025 16:35:16 +0000 (17:35 +0100)
commitfdd7b720b996d7df771fe04ff94ceb62498ac6a9
tree1bf1b5062b936c64f1c2ece4df51cb6ba8691fd4
parent9a79f2b1b81a27e740d7e5e59d07a38da12faf7d
ncurses: patch CVE-2025-6141

Pick relevant part of snapshot commit 20250329, see [1].

That has:
add a buffer-limit check in postprocess_termcap (report/testcase by
Yifan Zhang).

[1] https://invisible-island.net/ncurses/NEWS.html#index-t20250329

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-core/ncurses/files/CVE-2025-6141.patch [new file with mode: 0644]
meta/recipes-core/ncurses/ncurses_6.5.bb