{"affected":[{"ecosystem_specific":{"binaries":[{"ncurses-devel":"5.6-93.6.1","ncurses-devel-32bit":"5.6-93.6.1","tack":"5.6-93.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","name":"ncurses","purl":"pkg:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.6-93.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libncurses5":"5.6-93.6.1","libncurses5-32bit":"5.6-93.6.1","libncurses5-x86":"5.6-93.6.1","libncurses6":"5.6-93.6.1","libncurses6-32bit":"5.6-93.6.1","libncurses6-x86":"5.6-93.6.1","ncurses-devel":"5.6-93.6.1","ncurses-devel-32bit":"5.6-93.6.1","ncurses-utils":"5.6-93.6.1","tack":"5.6-93.6.1","terminfo":"5.6-93.6.1","terminfo-base":"5.6-93.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","name":"ncurses","purl":"pkg:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.6-93.6.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"libncurses5":"5.6-93.6.1","libncurses5-32bit":"5.6-93.6.1","libncurses5-x86":"5.6-93.6.1","libncurses6":"5.6-93.6.1","libncurses6-32bit":"5.6-93.6.1","libncurses6-x86":"5.6-93.6.1","ncurses-devel":"5.6-93.6.1","ncurses-devel-32bit":"5.6-93.6.1","ncurses-utils":"5.6-93.6.1","tack":"5.6-93.6.1","terminfo":"5.6-93.6.1","terminfo-base":"5.6-93.6.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","name":"ncurses","purl":"pkg:rpm/suse/ncurses&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.6-93.6.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"This update for ncurses fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2017-11112: Illegal address access in append_acs. (bsc#1047964)\n- CVE-2017-11113: Dereferencing NULL pointer in _nc_parse_entry. (bsc#1047965)\n- CVE-2017-10684, CVE-2017-10685: Add modified upstream fix from ncurses 6.0 to avoid broken\n  termcap format (bsc#1046853, bsc#1046858, bsc#1049344)\n\n","id":"SUSE-SU-2017:2076-1","modified":"2017-08-07T12:46:32Z","published":"2017-08-07T12:46:32Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172076-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1046853"},{"type":"REPORT","url":"https://bugzilla.suse.com/1046858"},{"type":"REPORT","url":"https://bugzilla.suse.com/1047964"},{"type":"REPORT","url":"https://bugzilla.suse.com/1047965"},{"type":"REPORT","url":"https://bugzilla.suse.com/1049344"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-10684"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-10685"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-11112"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2017-11113"}],"related":["CVE-2017-10684","CVE-2017-10685","CVE-2017-11112","CVE-2017-11113"],"summary":"Security update for ncurses","upstream":["CVE-2017-10684","CVE-2017-10685","CVE-2017-11112","CVE-2017-11113"]}