From a1dafa1b04fff04b238be8dbe5543f366062d2d4 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Mon, 6 Jun 2022 12:28:22 +0200 Subject: [PATCH] package/vim: security bump to version 8.2.5062 Fix CVE-2022-1851: Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Fix CVE-2022-1886: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Fix CVE-2022-1898: Use After Free in GitHub repository vim/vim prior to 8.2. Signed-off-by: Fabrice Fontaine Signed-off-by: Arnout Vandecappelle (Essensium/Mind) --- package/vim/vim.hash | 2 +- package/vim/vim.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/vim/vim.hash b/package/vim/vim.hash index 9d61d6fc87..55e5643b90 100644 --- a/package/vim/vim.hash +++ b/package/vim/vim.hash @@ -1,4 +1,4 @@ # Locally computed -sha256 5606a3c62dba038f4c4f2eddb305ffccbae58a7bfd569bdb8100f524564c8a32 vim-8.2.4980.tar.gz +sha256 3052bc702cfb49571dbcf9824827ae6032c37c7bf1a2aa0d3f7cc18c8f085dfb vim-8.2.5062.tar.gz sha256 0bcab3b635dd39208c42b496568d1e8171dad247cf3da5bab3d750c9d5883499 LICENSE sha256 96970b67f9cb38b0e759946cff22562a3c4b11ce78f62f2117d5e7ecded9ab4d README.txt diff --git a/package/vim/vim.mk b/package/vim/vim.mk index 9e70360b90..6dbb32d27b 100644 --- a/package/vim/vim.mk +++ b/package/vim/vim.mk @@ -4,7 +4,7 @@ # ################################################################################ -VIM_VERSION = 8.2.4980 +VIM_VERSION = 8.2.5062 VIM_SITE = $(call github,vim,vim,v$(VIM_VERSION)) VIM_DEPENDENCIES = ncurses $(TARGET_NLS_DEPENDENCIES) VIM_SUBDIR = src