Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed
* [Buildroot] [PATCH 1/1] package/vim: security bump to version 8.2.5062
@ 2022-06-06 10:28 Fabrice Fontaine
  2022-06-06 13:02 ` Arnout Vandecappelle
  2022-06-09 20:32 ` Peter Korsgaard
  0 siblings, 2 replies; 3+ messages in thread
From: Fabrice Fontaine @ 2022-06-06 10:28 UTC (permalink / raw)
  To: buildroot; +Cc: Fabrice Fontaine

Fix CVE-2022-1851: Out-of-bounds Read in GitHub repository vim/vim prior
to 8.2.

Fix CVE-2022-1886: Heap-based Buffer Overflow in GitHub repository
vim/vim prior to 8.2.

Fix CVE-2022-1898: Use After Free in GitHub repository vim/vim prior to
8.2.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
---
 package/vim/vim.hash | 2 +-
 package/vim/vim.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/vim/vim.hash b/package/vim/vim.hash
index 9d61d6fc87..55e5643b90 100644
--- a/package/vim/vim.hash
+++ b/package/vim/vim.hash
@@ -1,4 +1,4 @@
 # Locally computed
-sha256  5606a3c62dba038f4c4f2eddb305ffccbae58a7bfd569bdb8100f524564c8a32  vim-8.2.4980.tar.gz
+sha256  3052bc702cfb49571dbcf9824827ae6032c37c7bf1a2aa0d3f7cc18c8f085dfb  vim-8.2.5062.tar.gz
 sha256  0bcab3b635dd39208c42b496568d1e8171dad247cf3da5bab3d750c9d5883499  LICENSE
 sha256  96970b67f9cb38b0e759946cff22562a3c4b11ce78f62f2117d5e7ecded9ab4d  README.txt
diff --git a/package/vim/vim.mk b/package/vim/vim.mk
index 9e70360b90..6dbb32d27b 100644
--- a/package/vim/vim.mk
+++ b/package/vim/vim.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-VIM_VERSION = 8.2.4980
+VIM_VERSION = 8.2.5062
 VIM_SITE = $(call github,vim,vim,v$(VIM_VERSION))
 VIM_DEPENDENCIES = ncurses $(TARGET_NLS_DEPENDENCIES)
 VIM_SUBDIR = src
-- 
2.35.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply related	[flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/vim: security bump to version 8.2.5062
  2022-06-06 10:28 [Buildroot] [PATCH 1/1] package/vim: security bump to version 8.2.5062 Fabrice Fontaine
@ 2022-06-06 13:02 ` Arnout Vandecappelle
  2022-06-09 20:32 ` Peter Korsgaard
  1 sibling, 0 replies; 3+ messages in thread
From: Arnout Vandecappelle @ 2022-06-06 13:02 UTC (permalink / raw)
  To: Fabrice Fontaine, buildroot



On 06/06/2022 12:28, Fabrice Fontaine wrote:
> Fix CVE-2022-1851: Out-of-bounds Read in GitHub repository vim/vim prior
> to 8.2.
> 
> Fix CVE-2022-1886: Heap-based Buffer Overflow in GitHub repository
> vim/vim prior to 8.2.
> 
> Fix CVE-2022-1898: Use After Free in GitHub repository vim/vim prior to
> 8.2.
> 
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

  The previous one just got committed to 2022.02.x, and we already have a new one...

  Applied to master, thanks.

  Regards,
  Arnout

> ---
>   package/vim/vim.hash | 2 +-
>   package/vim/vim.mk   | 2 +-
>   2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/package/vim/vim.hash b/package/vim/vim.hash
> index 9d61d6fc87..55e5643b90 100644
> --- a/package/vim/vim.hash
> +++ b/package/vim/vim.hash
> @@ -1,4 +1,4 @@
>   # Locally computed
> -sha256  5606a3c62dba038f4c4f2eddb305ffccbae58a7bfd569bdb8100f524564c8a32  vim-8.2.4980.tar.gz
> +sha256  3052bc702cfb49571dbcf9824827ae6032c37c7bf1a2aa0d3f7cc18c8f085dfb  vim-8.2.5062.tar.gz
>   sha256  0bcab3b635dd39208c42b496568d1e8171dad247cf3da5bab3d750c9d5883499  LICENSE
>   sha256  96970b67f9cb38b0e759946cff22562a3c4b11ce78f62f2117d5e7ecded9ab4d  README.txt
> diff --git a/package/vim/vim.mk b/package/vim/vim.mk
> index 9e70360b90..6dbb32d27b 100644
> --- a/package/vim/vim.mk
> +++ b/package/vim/vim.mk
> @@ -4,7 +4,7 @@
>   #
>   ################################################################################
>   
> -VIM_VERSION = 8.2.4980
> +VIM_VERSION = 8.2.5062
>   VIM_SITE = $(call github,vim,vim,v$(VIM_VERSION))
>   VIM_DEPENDENCIES = ncurses $(TARGET_NLS_DEPENDENCIES)
>   VIM_SUBDIR = src
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 1/1] package/vim: security bump to version 8.2.5062
  2022-06-06 10:28 [Buildroot] [PATCH 1/1] package/vim: security bump to version 8.2.5062 Fabrice Fontaine
  2022-06-06 13:02 ` Arnout Vandecappelle
@ 2022-06-09 20:32 ` Peter Korsgaard
  1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2022-06-09 20:32 UTC (permalink / raw)
  To: Fabrice Fontaine; +Cc: buildroot

>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice@gmail.com> writes:

 > Fix CVE-2022-1851: Out-of-bounds Read in GitHub repository vim/vim prior
 > to 8.2.

 > Fix CVE-2022-1886: Heap-based Buffer Overflow in GitHub repository
 > vim/vim prior to 8.2.

 > Fix CVE-2022-1898: Use After Free in GitHub repository vim/vim prior to
 > 8.2.

 > Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>

Committed to 2022.02.x, thanks.

> ---
 >  package/vim/vim.hash | 2 +-
 >  package/vim/vim.mk   | 2 +-
 >  2 files changed, 2 insertions(+), 2 deletions(-)

 > diff --git a/package/vim/vim.hash b/package/vim/vim.hash
 > index 9d61d6fc87..55e5643b90 100644
 > --- a/package/vim/vim.hash
 > +++ b/package/vim/vim.hash
 > @@ -1,4 +1,4 @@
 >  # Locally computed
 > -sha256  5606a3c62dba038f4c4f2eddb305ffccbae58a7bfd569bdb8100f524564c8a32  vim-8.2.4980.tar.gz
 > +sha256  3052bc702cfb49571dbcf9824827ae6032c37c7bf1a2aa0d3f7cc18c8f085dfb  vim-8.2.5062.tar.gz
 >  sha256  0bcab3b635dd39208c42b496568d1e8171dad247cf3da5bab3d750c9d5883499  LICENSE
 >  sha256  96970b67f9cb38b0e759946cff22562a3c4b11ce78f62f2117d5e7ecded9ab4d  README.txt
 > diff --git a/package/vim/vim.mk b/package/vim/vim.mk
 > index 9e70360b90..6dbb32d27b 100644
 > --- a/package/vim/vim.mk
 > +++ b/package/vim/vim.mk
 > @@ -4,7 +4,7 @@
 >  #
 >  ################################################################################
 
 > -VIM_VERSION = 8.2.4980
 > +VIM_VERSION = 8.2.5062
 >  VIM_SITE = $(call github,vim,vim,v$(VIM_VERSION))
 >  VIM_DEPENDENCIES = ncurses $(TARGET_NLS_DEPENDENCIES)
 >  VIM_SUBDIR = src
 > -- 

 > 2.35.1

 > _______________________________________________
 > buildroot mailing list
 > buildroot@buildroot.org
 > https://lists.buildroot.org/mailman/listinfo/buildroot


-- 
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

^ permalink raw reply	[flat|nested] 3+ messages in thread
end of thread, other threads:[~2022-06-09 20:32 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-06-06 10:28 [Buildroot] [PATCH 1/1] package/vim: security bump to version 8.2.5062 Fabrice Fontaine
2022-06-06 13:02 ` Arnout Vandecappelle
2022-06-09 20:32 ` Peter Korsgaard

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox