ncurses (6.3-2ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow in infocmp
    - debian/patches/CVE-2025-69720.patch: clamp length to
      MAX_TERMINFO_LENGTH before copying into buf2 in analyze_string.
    - CVE-2025-69720

 -- Paulo Flabiano Smorigo <pfsmorigo@canonical.com>  Tue, 30 Jun 2026 21:25:30 +0000

ncurses (6.3-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read in the convert_strings function
    - debian/patches/CVE-2022-29458.patch:add a limit-check to guard against
      corrupt terminfo data.
    - CVE-2022-29458
  * SECURITY UPDATE: memory corruption when processing malformed terminfo data
    entries loaded by setuid/setgid programs
    - debian/patches/CVE-2023-29491-mitigation-1.patch: fix copy/paste error
      in configure.in.
    - debian/patches/CVE-2023-29491-mitigation-2.patch: change the
      --disable-root-environ configure option behavior.
    - debian/rules: set --disable-root-environ in configuration options.
    - debian/libtinfo5.symbols, debian/libtinfo6.symbols: add _nc_env_access
      to symbols files.
    - CVE-2023-29491

 -- Camila Camargo de Matos <camila.camargodematos@canonical.com>  Tue, 16 May 2023 15:45:27 -0300

ncurses (6.3-2) unstable; urgency=medium

  * Add Breaks on neovim (<< 0.6.0) to ncurses-base (Closes: #999777).
  * Drop patch 02-debian-drop-rin-from-screen-256color.diff
    (Closes: #1003546).  Tmux users should upgrade to version 3.0 or
    higher, or set TERM to something else than screen-256color.
  * Make ncurses-base the primary package into which the Debian FAQ
    and TODO files are installed.
  * Add libmd-dev to Build-Depends on kfreebsd-any to work around FTBFS
    if /usr/lib/$(DEB_HOST_MULTIARCH)/pkgconfig does not exist.
  * Install the example programs into /usr/libexec/ncurses-examples.

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 17 Jan 2022 18:02:04 +0100

ncurses (6.3-1) unstable; urgency=medium

  * New upstream release.
  * Update symbols files and bump shlibs.
    - Update the minimal version for symbols added after the 6.2 release
      to 6.3.
  * Drop the lintian override for ncurses-examples introduced in version
    6.1+20181013-2, it no longer triggers.
  * Do not force removal of obsolete packages which terminfo files have
    been taken over by ncurses-term (Closes: #994433).

 -- Sven Joachim <svenjoac@gmx.de>  Mon, 15 Nov 2021 17:54:06 +0100

ncurses (6.2+20210905-1) unstable; urgency=low

  * New upstream patchlevel.
    - Extend --disable-pkg-ldflags option to also control whether
      $LDFLAGS from the build is provided in -config and .pc files.
      Use that option in debian/rules (Closes: #986764).
    - Drop symbols GCC_PRINTF and GCC_SCANF from curses.h.in, to
      simplify use (Closes: #993179).
  * Drop patch 02-fix-mlterm.diff, applied upstream.
  * Refresh remaining Debian patches.
  * Update symbols files for new symbols erasewchar_sp, killwchar_sp
    and _nc_reset_tparm.
  * Bump autoconf-dickey build dependency to (>= 2.52+20210509), as per
    test/configure.in.
  * Ship stterm and stterm-256color terminfo entries in ncurses-term.
  * Take over terminfo entries from the deceased Debian packages
    jfbterm, kon2, libiterm1 and tn5250 in ncurses-term.
  * Update list of terminfo entries shipped by other Debian packages.
  * Update years in debian/copyright.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 09 Sep 2021 19:56:22 +0200

ncurses (6.2+20201114-4) unstable; urgency=medium

  * Source-only upload for migration to testing, no changes.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 26 Aug 2021 18:39:10 +0200

ncurses (6.2+20201114-3) unstable; urgency=medium

  [ Debian Janitor ]
  * Remove constraints unnecessary since stretch:
    + ncurses-term: Drop versioned constraint on suckless-tools in Replaces.
    + ncurses-term: Drop versioned constraint on suckless-tools in Breaks.
    + libtinfo5: Drop versioned constraint on dialog in Breaks.

  [ Jordi Mallach ]
  * Introduce a libncursesw6-udeb package, needed by newer nano versions
    (Closes: #976275).

  [ Sven Joachim ]
  * Add new upstream signing key 19882D92DDA4C400C22C0D56CC2AF4472167BE03
    to debian/upstream/signing-key.asc.

 -- Sven Joachim <svenjoac@gmx.de>  Sun, 22 Aug 2021 08:29:53 +0200

ncurses (6.2+20201114-2) unstable; urgency=medium

  * New patch 02-fix-mlterm.diff, cherry-picked from the 20201205 upstream
    patchlevel.
    - Correct mlterm3 kf1-kf4 (Closes: #975322).
    - Add flash to mlterm3.
  * Refresh Debian patches.

 -- Sven Joachim <svenjoac@gmx.de>  Fri, 01 Jan 2021 16:02:10 +0100

ncurses (6.2+20201114-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Add tmux-direct terminfo entry (Closes: #895754).
  * Add Breaks on cowdancer (<< 0.89~) to libncurses6 (Closes: #971672).
  * Upgrade Standards-Version to 4.5.1, no changes needed.

 -- Sven Joachim <svenjoac@gmx.de>  Thu, 19 Nov 2020 18:08:43 +0100

ncurses (6.2+20200918-1) unstable; urgency=medium

  * New upstream patchlevel.
    - Corrected condition for appending curses.events to the generated
      curses.h (report by Sven Joachim, Closes: #970577).
   * Version the Provides of the transitional -dev packages
     by libncurses-dev.

 -- Sven Joachim <svenjoac@gmx.de>  Sun, 20 Sep 2020 11:16:40 +0200

# For older changelog entries, run 'apt-get changelog libtinfo5'
