Package: ncurses / 6.0+20161126-1+deb9u2

Metadata

Package Version Patches format
ncurses 6.0+20161126-1+deb9u2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01 debian no ada doc.diff | (download)

doc/html/index.html | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 link to ada binding doc in separate package
 The Ada binding is packaged separately, there is no need to duplicate
 the documentation in ncurses-doc. Replace the internal link with a
 hyperlink.
02 debian backspace.diff | (download)

misc/terminfo.src | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 fix backspace key description in some terminfo entries
Bug-Debian: https://bugs.debian.org/237997
Bug-Debian: https://bugs.debian.org/602300
03 debian ncursesconfig omit L.diff | (download)

misc/ncurses-config.in | 7 0 + 7 - 0 !
1 file changed, 7 deletions(-)

 omit -l part from ncurses5{w,}-config output
 "ncurses5-config --libs" includes a "-L" part which is not needed
 since the library is installed in a directory in the default linker
 search path.
 .
 Upstream only omits the -L part if $libdir is /usr/lib.  Until there
 is a way to obtain the multiarch path without running
 dpkg-architecture our patch is not upstreamable.
Bug-Debian: https://bugs.debian.org/638281
Bug-Debian: https://bugs.debian.org/745479
cve fixes.diff | (download)

ncurses/tinfo/alloc_entry.c | 6 5 + 1 - 0 !
ncurses/tinfo/parse_entry.c | 22 12 + 10 - 0 !
progs/dump_entry.c | 34 21 + 13 - 0 !
3 files changed, 38 insertions(+), 24 deletions(-)

 fixes for four cves
 Fixes for CVE 2017-10684, CVE-2017-10685, CVE-2017-11112,
 CVE-2017-11113 cherry-picked from upstream patchlevels 20170701 and
 20170708.
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1464684
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1464685
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1464686
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1464687
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1464691
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1464692
termcap fix.diff | (download)

progs/dump_entry.c | 104 78 + 26 - 0 !
1 file changed, 78 insertions(+), 26 deletions(-)

 backport termcap-format fix from the 20170715 patchlevel
Bug-Debian: https://bugs.debian.org/868266
more cve fixes.diff | (download)

ncurses/tinfo/alloc_entry.c | 2 1 + 1 - 0 !
ncurses/tinfo/comp_parse.c | 8 3 + 5 - 0 !
ncurses/tinfo/comp_scan.c | 4 4 + 0 - 0 !
ncurses/tinfo/parse_entry.c | 89 59 + 30 - 0 !
ncurses/tinfo/strings.c | 5 3 + 2 - 0 !
ncurses/tinfo/trim_sgr0.c | 2 1 + 1 - 0 !
6 files changed, 71 insertions(+), 39 deletions(-)

 fixes for six cves in the tic library
 Fixes for CVE-2017-13728, CVE-2017-13729, CVE-2017-13730,
 CVE-2017-13731, CVE-2017-13732 and CVE-2017-13734 cherry-picked from
 upstream patchlevel 20170826.
Bug-Debian: https://bugs.debian.org/873723
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1484274
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1484276
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1484284
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1484285
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1484287
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1484291
cve 2017 13733.diff | (download)

progs/dump_entry.c | 19 10 + 9 - 0 !
progs/tput.c | 2 1 + 1 - 0 !
2 files changed, 11 insertions(+), 10 deletions(-)

 fix for cve-2017-13733 in the tic program
 Fix for CVE-2017-13733 cherry-picked from upstream patchlevel
 20170902.
Bug-Debian: https://bugs.debian.org/873746
Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=1484290
cve 2017 16879.diff | (download)

ncurses/tinfo/write_entry.c | 11 10 + 1 - 0 !
1 file changed, 10 insertions(+), 1 deletion(-)

 fix for cve-2017-16879 in the _nc_write_entry function
 Fix for CVE-2017-16879 cherry-picked from upstream patchlevel
 20171125.
Bug-Debian: https://bugs.debian.org/882620