Debian Security Advisory

DLA-2186-1 ncmpc -- LTS security update

Date Reported:
25 Apr 2020
Affected Packages:
ncmpc
Vulnerable:
Yes
Security database references:
In Mitre's CVE dictionary: CVE-2018-9240.
More information:

It has been discovered a NULL pointer dereference could happen in ncmpc, an ncurses-based audio player. This could result in a crash and a denial of service.

For Debian 8 Jessie, this problem has been fixed in version 0.24-1+deb8u1.

We recommend that you upgrade your ncmpc packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS