From c96d6925f2e810bddbc8d4a1a98a7d42c66ad339 Mon Sep 17 00:00:00 2001 From: Fabrice Fontaine Date: Sun, 10 Apr 2022 19:39:03 +0200 Subject: [PATCH] package/vim: security bump to version 8.2.4732 Fix CVE-2022-1154: Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646. Fix CVE-2022-1160: heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647. Signed-off-by: Fabrice Fontaine Signed-off-by: Peter Korsgaard --- package/vim/vim.hash | 2 +- package/vim/vim.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/vim/vim.hash b/package/vim/vim.hash index d2c91dcfa5..d55b1ea355 100644 --- a/package/vim/vim.hash +++ b/package/vim/vim.hash @@ -1,4 +1,4 @@ # Locally computed -sha256 acca7330e41d01b53d4455ff98fafbf13282ba6461cd92eb1188836f6b03ec0f vim-8.2.4632.tar.gz +sha256 ccd57b074326b2faa15591eba3c86dcc07e53781079c44a0354436b8c4fe9b70 vim-8.2.4732.tar.gz sha256 0bcab3b635dd39208c42b496568d1e8171dad247cf3da5bab3d750c9d5883499 LICENSE sha256 96970b67f9cb38b0e759946cff22562a3c4b11ce78f62f2117d5e7ecded9ab4d README.txt diff --git a/package/vim/vim.mk b/package/vim/vim.mk index 71aa735eff..4eb659fd6e 100644 --- a/package/vim/vim.mk +++ b/package/vim/vim.mk @@ -4,7 +4,7 @@ # ################################################################################ -VIM_VERSION = 8.2.4632 +VIM_VERSION = 8.2.4732 VIM_SITE = $(call github,vim,vim,v$(VIM_VERSION)) VIM_DEPENDENCIES = ncurses $(TARGET_NLS_DEPENDENCIES) VIM_SUBDIR = src