diff --git a/llvm-build/build_ncurses.sh b/llvm-build/build_ncurses.sh
index f576065619757941687bca4b66ce5d55aa249f57..2b795ed96e3560f479a5ab8950af5b4f266bb219 100755
--- a/llvm-build/build_ncurses.sh
+++ b/llvm-build/build_ncurses.sh
@@ -45,6 +45,8 @@ if [ -e ${ncurses_package} ]; then
     patch -Np1 < ncurses-kbs.patch
     patch -Np1 < ncurses-libs.patch
     patch -Np1 < backport-CVE-2022-29458.patch
+    patch -Np1 < backport-0001-CVE-2023-29491-fix-configure-root-args-option.patch
+    patch -Np1 < backport-0002-CVE-2023-29491-env-access.patch
 
     if [ ! -b ${NCURSES_BUILD_PATH} ]; then
         mkdir -p ${NCURSES_BUILD_PATH}