]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
ncurses: patch CVE-2025-6141
authorPeter Marko <peter.marko@siemens.com>
Thu, 24 Jul 2025 22:14:21 +0000 (00:14 +0200)
committerSteve Sakoman <steve@sakoman.com>
Mon, 28 Jul 2025 15:36:26 +0000 (08:36 -0700)
commit79b080eb93918431c97edbbc80de5f70a2b09a4a
tree2f8690e5dd9abd5fa295717c157282b0f474f1e1
parent14fbbdc51f7d02bc10b8078c0ba1de17f1563d73
ncurses: patch CVE-2025-6141

Pick relevant part of snapshot commit 20250329, see [1].

That has:
add a buffer-limit check in postprocess_termcap (report/testcase by
Yifan Zhang).

[1] https://invisible-island.net/ncurses/NEWS.html#index-t20250329

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-core/ncurses/files/CVE-2025-6141.patch [new file with mode: 0644]
meta/recipes-core/ncurses/ncurses_6.4.bb