Re: [RHSA-1999:028-01] Buffer overflow in libtermcap tgetent()

[Martin Schulze]

Olaf Kirch wrote:
> FWIW, Caldera OpenLinux has stopped using termcap altogether since release 2.2.
> Doing an rpm -qlv ncurses-termcap-devel reveals that libtermcap.so is a
> symlink to libncurses.

Same for Debian.  However, I haven't checked ncurses and terminfo.  I
don't know if and how much code is shared with termcap thus I don't
know if the apps might still be vulnerable.

Regards,

        Joey

--
GNU does not eliminate all the world's problems, only some of them.
                                                -- The GNU Manifesto