CVE-2021-39537

[BRUNO VERNAY]

Hi

There is a new CVE-2021-39537 : 
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39537
referencing this more than one year old thread: 
https://lists.gnu.org/archive/html/bug-ncurses/2020-08/msg00006.html

I did not find any mention of this CVE in the mailing list  and  reading the 
messages it sounds like a false-positive.

Yet all versions up to (including) 6.2.1  are flagged with a CVSS 8.8.

Is it a real issue (and then where is the patch?)
Is it a false-positive, you could ask for he CVE to be removed 
https://cveform.mitre.org/ (I can do it too, but you would have more weight 
obviously)

Regards
Bruno

Internal