[Debian] CVE: CVE-2022-29458: ncurses: an out-of-bounds read

[Yue Tao]

CVE-2022-29458: https://nvd.nist.gov/vuln/detail/CVE-2022-29458

ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convert_strings in tinfo/read_entry.c in the terminfo library.

Base Score: High

References:

https://security-tracker.debian.org/tracker/CVE-2022-29458

['libncursesw5-dev_6.2+20201114-2_amd64.deb===>libncursesw5-dev_6.2+20201114-2+deb11u1_amd64.deb', 'libncurses6_6.2+20201114-2_amd64.deb===>libncurses6_6.2+20201114-2+deb11u1_amd64.deb', 'libncursesw6_6.2+20201114-2_amd64.deb===>libncursesw6_6.2+20201114-2+deb11u1_amd64.deb', 'libtinfo6_6.2+20201114-2_amd64.deb===>libtinfo6_6.2+20201114-2+deb11u1_amd64.deb', 'ncurses-base_6.2+20201114-2_all.deb===>ncurses-base_6.2+20201114-2+deb11u1_all.deb', 'ncurses-bin_6.2+20201114-2_amd64.deb===>ncurses-bin_6.2+20201114-2+deb11u1_amd64.deb']

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/tools/+/886235

[Ghada Khalil (gkhalil)]

Marking as Fix Released. https://review.opendev.org/c/starlingx/tools/+/886235 merged on June 24.