Re: Concerning a possible bug in the 'ncurses' package

[Thomas Dickey]

On Sun, 28 Aug 2005, Ben Schwarz wrote:

> This email concerns a bug or security vulnerability that members of
> the MOPS project (http://www.cs.berkeley.edu/~daw/mops/) have found
> during a recent audit of all programs packaged with the Redhat 9 Linux

A recent audit of old code.  That's ncurses 5.3 plus development patches. 
The current release is ncurses 5.4, which is still more than a year old.. 
That's not very useful to me, since the code you're discussing doesn't 
look like that any more - nor does the release version.  (There may of 
course be some bugs in current code).  Noting that Redhat as a matter of 
practice (along with several others) distributes development versions of 
ncurses, it's always possible to find bugs.

--
Thomas E. Dickey
http://invisible-island.net
ftp://invisible-island.net