From 287bf2688a66ef594d63776ba1b09ec52612c9dd Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Wed, 30 Mar 2022 22:37:05 +0000 Subject: Wed Mar 30 22:37:05 UTC 2022 patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txz: Upgraded. Fixes a use-after-free in utf_ptr2char in vim/vim prior to 8.2.4646. This vulnerability is capable of crashing software, bypassing protection mechanisms, modifying memory, and possibly execution of arbitrary code. Thanks to marav for the heads-up. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154 https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425 https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5 (* Security fix *) patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txz: Upgraded. --- patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt | 11 +++++++++++ patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt | 11 +++++++++++ 2 files changed, 22 insertions(+) create mode 100644 patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt create mode 100644 patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt (limited to 'patches/packages') diff --git a/patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt b/patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt new file mode 100644 index 000000000..4a843388d --- /dev/null +++ b/patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt @@ -0,0 +1,11 @@ +vim: vim (Vi IMproved) +vim: +vim: Vim is an almost compatible version of the UNIX editor vi. Many new +vim: features have been added: multi level undo, command line history, +vim: filename completion, block operations, and more. +vim: +vim: Vim's development is led by Bram Moolenaar. +vim: +vim: This package also contains the Exuberant Ctags program +vim: written by Darren Hiebert. +vim: diff --git a/patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt b/patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt new file mode 100644 index 000000000..3b81553b1 --- /dev/null +++ b/patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt @@ -0,0 +1,11 @@ +vim-gvim: vim-gvim (gvim, the X/GTK3 enabled version of vim) +vim-gvim: +vim-gvim: Gvim is a graphical version of vim. Vim is an almost compatible +vim-gvim: version of the UNIX editor vi. Many new features have been added, +vim-gvim: such as multi level undo, command line history, filename completion, +vim-gvim: block operations, and more. +vim-gvim: +vim-gvim: The main vim package in the AP series is required to use this package. +vim-gvim: +vim-gvim: Vim's development is led by Bram Moolenaar. +vim-gvim: -- cgit v1.2.3-80-g2a13