From 821b8a94bf6a33da86d2e1f956c068d2b6270e40 Mon Sep 17 00:00:00 2001 From: Patrick J Volkerding Date: Wed, 17 Aug 2022 20:41:53 +0000 Subject: Wed Aug 17 20:41:53 UTC 2022 patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txz: Rebuilt. Fix use after free, out-of-bounds read, and heap based buffer overflow. Thanks to marav for the heads-up. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2816 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2819 (* Security fix *) patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txz: Rebuilt. --- ChangeLog.rss | 23 +++++++- ChangeLog.txt | 11 ++++ FILELIST.TXT | 69 +++++++++++----------- .../packages/vim-8.2.4649-x86_64-1_slack15.0.txt | 11 ---- .../packages/vim-8.2.4649-x86_64-2_slack15.0.txt | 11 ++++ .../vim-gvim-8.2.4649-x86_64-1_slack15.0.txt | 11 ---- .../vim-gvim-8.2.4649-x86_64-2_slack15.0.txt | 11 ++++ patches/source/vim/CVE-2022-2816.patch | 26 ++++++++ patches/source/vim/CVE-2022-2817.patch | 69 ++++++++++++++++++++++ patches/source/vim/CVE-2022-2819.patch | 40 +++++++++++++ patches/source/vim/vim-gvim.SlackBuild | 7 ++- patches/source/vim/vim.SlackBuild | 7 ++- recompress.sh | 3 + 13 files changed, 240 insertions(+), 59 deletions(-) delete mode 100644 patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt create mode 100644 patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txt delete mode 100644 patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt create mode 100644 patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txt create mode 100644 patches/source/vim/CVE-2022-2816.patch create mode 100644 patches/source/vim/CVE-2022-2817.patch create mode 100644 patches/source/vim/CVE-2022-2819.patch diff --git a/ChangeLog.rss b/ChangeLog.rss index 21a40f642..e3d333f74 100644 --- a/ChangeLog.rss +++ b/ChangeLog.rss @@ -11,9 +11,28 @@ Tracking Slackware development in git. en-us urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f - Tue, 16 Aug 2022 18:51:34 GMT - Wed, 17 Aug 2022 11:30:15 GMT + Wed, 17 Aug 2022 20:41:53 GMT + Thu, 18 Aug 2022 11:29:51 GMT maintain_current_git.sh v 1.17 + + Wed, 17 Aug 2022 20:41:53 GMT + Wed, 17 Aug 2022 20:41:53 GMT + https://git.slackware.nl/current/tag/?h=20220817204153 + 20220817204153 + + +patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txz: Rebuilt. + Fix use after free, out-of-bounds read, and heap based buffer overflow. + Thanks to marav for the heads-up. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2816 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2817 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2819 + (* Security fix *) +patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txz: Rebuilt. + ]]> + + Tue, 16 Aug 2022 18:51:34 GMT Tue, 16 Aug 2022 18:51:34 GMT diff --git a/ChangeLog.txt b/ChangeLog.txt index 22963333f..269c326a1 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,14 @@ +Wed Aug 17 20:41:53 UTC 2022 +patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txz: Rebuilt. + Fix use after free, out-of-bounds read, and heap based buffer overflow. + Thanks to marav for the heads-up. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2816 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2817 + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2819 + (* Security fix *) +patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txz: Rebuilt. ++--------------------------+ Tue Aug 16 18:51:34 UTC 2022 patches/packages/mariadb-10.5.17-x86_64-1_slack15.0.txz: Upgraded. This update fixes bugs and several security issues. diff --git a/FILELIST.TXT b/FILELIST.TXT index a40ec8657..6696c558d 100644 --- a/FILELIST.TXT +++ b/FILELIST.TXT @@ -1,20 +1,20 @@ -Tue Aug 16 18:54:25 UTC 2022 +Wed Aug 17 20:44:53 UTC 2022 Here is the file list for this directory. If you are using a mirror site and find missing or extra files in the disk subdirectories, please have the archive administrator refresh the mirror. -drwxr-xr-x 12 root root 4096 2022-08-16 18:51 . +drwxr-xr-x 12 root root 4096 2022-08-17 20:41 . -rw-r--r-- 1 root root 5767 2022-02-02 22:44 ./ANNOUNCE.15.0 -rw-r--r-- 1 root root 16609 2022-03-30 19:03 ./CHANGES_AND_HINTS.TXT --rw-r--r-- 1 root root 1147493 2022-08-15 20:29 ./CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-08-15 20:29 ./CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 1147493 2022-08-16 18:54 ./CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-08-16 18:54 ./CHECKSUMS.md5.asc -rw-r--r-- 1 root root 17976 1994-06-10 02:28 ./COPYING -rw-r--r-- 1 root root 35147 2007-06-30 04:21 ./COPYING3 -rw-r--r-- 1 root root 19573 2016-06-23 20:08 ./COPYRIGHT.TXT -rw-r--r-- 1 root root 616 2006-10-02 04:37 ./CRYPTO_NOTICE.TXT --rw-r--r-- 1 root root 1916465 2022-08-16 18:51 ./ChangeLog.txt +-rw-r--r-- 1 root root 1917011 2022-08-17 20:41 ./ChangeLog.txt drwxr-xr-x 3 root root 4096 2013-03-20 22:17 ./EFI drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rw-r--r-- 1 root root 1187840 2021-06-15 19:16 ./EFI/BOOT/bootx64.efi @@ -25,7 +25,7 @@ drwxr-xr-x 2 root root 4096 2022-02-02 08:21 ./EFI/BOOT -rwxr-xr-x 1 root root 2504 2019-07-05 18:54 ./EFI/BOOT/make-grub.sh -rw-r--r-- 1 root root 10722 2013-09-21 19:02 ./EFI/BOOT/osdetect.cfg -rw-r--r-- 1 root root 1273 2013-08-12 21:08 ./EFI/BOOT/tools.cfg --rw-r--r-- 1 root root 1498064 2022-08-15 20:28 ./FILELIST.TXT +-rw-r--r-- 1 root root 1498064 2022-08-16 18:54 ./FILELIST.TXT -rw-r--r-- 1 root root 1572 2012-08-29 18:27 ./GPG-KEY -rw-r--r-- 1 root root 864745 2022-02-02 08:25 ./PACKAGES.TXT -rw-r--r-- 1 root root 8034 2022-02-02 03:36 ./README.TXT @@ -737,13 +737,13 @@ drwxr-xr-x 2 root root 4096 2008-05-07 05:21 ./pasture/source/php/pear -rwxr-xr-x 1 root root 9448 2018-05-16 22:38 ./pasture/source/php/php.SlackBuild -rw-r--r-- 1 root root 775 2017-07-07 19:25 ./pasture/source/php/php.ini-development.diff.gz -rw-r--r-- 1 root root 830 2005-12-09 05:18 ./pasture/source/php/slack-desc -drwxr-xr-x 4 root root 4096 2022-08-16 18:54 ./patches --rw-r--r-- 1 root root 43937 2022-08-16 18:54 ./patches/CHECKSUMS.md5 --rw-r--r-- 1 root root 163 2022-08-16 18:54 ./patches/CHECKSUMS.md5.asc --rw-r--r-- 1 root root 58932 2022-08-16 18:54 ./patches/FILE_LIST --rw-r--r-- 1 root root 11193048 2022-08-16 18:54 ./patches/MANIFEST.bz2 --rw-r--r-- 1 root root 33462 2022-08-16 18:54 ./patches/PACKAGES.TXT -drwxr-xr-x 3 root root 16384 2022-08-16 18:54 ./patches/packages +drwxr-xr-x 4 root root 4096 2022-08-17 20:44 ./patches +-rw-r--r-- 1 root root 44147 2022-08-17 20:44 ./patches/CHECKSUMS.md5 +-rw-r--r-- 1 root root 163 2022-08-17 20:44 ./patches/CHECKSUMS.md5.asc +-rw-r--r-- 1 root root 59193 2022-08-17 20:44 ./patches/FILE_LIST +-rw-r--r-- 1 root root 11195452 2022-08-17 20:44 ./patches/MANIFEST.bz2 +-rw-r--r-- 1 root root 33462 2022-08-17 20:44 ./patches/PACKAGES.TXT +drwxr-xr-x 3 root root 16384 2022-08-17 20:44 ./patches/packages -rw-r--r-- 1 root root 327 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txt -rw-r--r-- 1 root root 10716 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz -rw-r--r-- 1 root root 163 2022-02-15 05:07 ./patches/packages/aaa_base-15.0-x86_64-4_slack15.0.txz.asc @@ -874,12 +874,12 @@ drwxr-xr-x 2 root root 4096 2022-05-09 21:37 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 354 2022-02-15 18:37 ./patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 2805300 2022-02-15 18:37 ./patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-02-15 18:37 ./patches/packages/util-linux-2.37.4-x86_64-1_slack15.0.txz.asc --rw-r--r-- 1 root root 383 2022-03-30 22:32 ./patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 8140380 2022-03-30 22:32 ./patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-03-30 22:32 ./patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txz.asc --rw-r--r-- 1 root root 503 2022-03-30 22:34 ./patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt --rw-r--r-- 1 root root 1660648 2022-03-30 22:34 ./patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txz --rw-r--r-- 1 root root 163 2022-03-30 22:34 ./patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txz.asc +-rw-r--r-- 1 root root 383 2022-08-17 19:21 ./patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txt +-rw-r--r-- 1 root root 8144256 2022-08-17 19:21 ./patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txz +-rw-r--r-- 1 root root 163 2022-08-17 19:21 ./patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txz.asc +-rw-r--r-- 1 root root 503 2022-08-17 19:22 ./patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txt +-rw-r--r-- 1 root root 1659412 2022-08-17 19:22 ./patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txz +-rw-r--r-- 1 root root 163 2022-08-17 19:22 ./patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txz.asc -rw-r--r-- 1 root root 507 2022-07-10 18:40 ./patches/packages/wavpack-5.5.0-x86_64-1_slack15.0.txt -rw-r--r-- 1 root root 185936 2022-07-10 18:40 ./patches/packages/wavpack-5.5.0-x86_64-1_slack15.0.txz -rw-r--r-- 1 root root 163 2022-07-10 18:40 ./patches/packages/wavpack-5.5.0-x86_64-1_slack15.0.txz.asc @@ -904,7 +904,7 @@ drwxr-xr-x 2 root root 4096 2022-05-09 21:37 ./patches/packages/linux-5.15 -rw-r--r-- 1 root root 388 2022-08-09 17:48 ./patches/packages/zlib-1.2.12-x86_64-2_slack15.0.txt -rw-r--r-- 1 root root 105196 2022-08-09 17:48 ./patches/packages/zlib-1.2.12-x86_64-2_slack15.0.txz -rw-r--r-- 1 root root 163 2022-08-09 17:48 ./patches/packages/zlib-1.2.12-x86_64-2_slack15.0.txz.asc -drwxr-xr-x 45 root root 4096 2022-08-16 18:43 ./patches/source +drwxr-xr-x 45 root root 4096 2022-08-17 20:38 ./patches/source drwxr-xr-x 2 root root 4096 2022-01-16 05:07 ./patches/source/aaa_base -rw-r--r-- 1 root root 11041 2022-02-15 04:49 ./patches/source/aaa_base/_aaa_base.tar.gz -rwxr-xr-x 1 root root 3894 2022-02-15 05:07 ./patches/source/aaa_base/aaa_base.SlackBuild @@ -1300,15 +1300,18 @@ drwxr-xr-x 2 root root 4096 2020-05-08 19:39 ./patches/source/util-linux/p -rw-r--r-- 1 root root 335 2014-07-03 08:34 ./patches/source/util-linux/util-linux.fdisk-no-solaris.diff.gz -rw-r--r-- 1 root root 10292 2009-05-30 01:25 ./patches/source/util-linux/ziptool-1.4.0.tar.xz -rw-r--r-- 1 root root 386 2009-05-30 01:25 ./patches/source/util-linux/ziptool-fix_build.patch.gz -drwxr-xr-x 2 root root 4096 2022-03-30 18:18 ./patches/source/vim +drwxr-xr-x 2 root root 4096 2022-08-17 19:11 ./patches/source/vim +-rw-r--r-- 1 root root 547 2022-08-17 19:02 ./patches/source/vim/CVE-2022-2816.patch.gz +-rw-r--r-- 1 root root 1105 2022-08-17 19:03 ./patches/source/vim/CVE-2022-2817.patch.gz +-rw-r--r-- 1 root root 687 2022-08-17 19:03 ./patches/source/vim/CVE-2022-2819.patch.gz -rw-r--r-- 1 root root 299348 2009-07-09 22:03 ./patches/source/vim/ctags-5.8.tar.xz -rw-r--r-- 1 root root 2768 2022-02-12 08:11 ./patches/source/vim/ctags.use-conventional-unused-marker.patch.gz -rw-r--r-- 1 root root 8249 2006-01-19 17:01 ./patches/source/vim/gvim.png -rw-r--r-- 1 root root 834 2018-02-27 06:13 ./patches/source/vim/slack-desc.vim -rw-r--r-- 1 root root 959 2018-03-15 02:41 ./patches/source/vim/slack-desc.vim-gvim -rw-r--r-- 1 root root 10400559 2022-03-30 18:17 ./patches/source/vim/vim-8.2.4649.tar.lz --rwxr-xr-x 1 root root 6370 2022-03-30 22:26 ./patches/source/vim/vim-gvim.SlackBuild --rwxr-xr-x 1 root root 7934 2022-03-30 22:26 ./patches/source/vim/vim.SlackBuild +-rwxr-xr-x 1 root root 6589 2022-08-17 19:08 ./patches/source/vim/vim-gvim.SlackBuild +-rwxr-xr-x 1 root root 8153 2022-08-17 19:12 ./patches/source/vim/vim.SlackBuild -rw-r--r-- 1 root root 283 2019-01-11 20:43 ./patches/source/vim/vim.vimrc.diff.gz drwxr-xr-x 2 root root 4096 2022-07-10 18:34 ./patches/source/wavpack -rw-r--r-- 1 root root 963 2019-12-19 18:54 ./patches/source/wavpack/slack-desc @@ -2736,9 +2739,9 @@ drwxr-xr-x 2 root root 69632 2022-02-01 08:29 ./slackware64/kde -rw-r--r-- 1 root root 163 2022-01-08 22:35 ./slackware64/kde/kimageformats-5.90.0-x86_64-1.txz.asc -rw-r--r-- 1 root root 253 2022-01-06 22:54 ./slackware64/kde/kimagemapeditor-21.12.1-x86_64-1.txt -rw-r--r-- 1 root root 1180648 2022-01-06 22:54 ./slackware64/kde/kimagemapeditor-21.12.1-x86_64-1.txz --rw-r--r-- 1 root root 163 2022-01-06 22:54 ./slackware64/kde/kimagemapeditor-21.12.1-x86_64-1.txz.asc --rw-r--r-- 1 root root 184 2022-01-06 21:38 ./slackware64/kde/kimap-21.12.1-x86_64-1.txt --rw-r--r-- 1 root root 234768 2022-01-06 21:38 ./slackware64/kde/kimap-21.12.1-x86_64-1.txz +-rw-r--r-- 1 root root 163 2022-01-06 22:54 ./slackware64/kde/kimagemapeditor-21.12.1-x86_64-1.txz.asc +-rw-r--r-- 1 root root 184 2022-01-06 21:38 ./slackware64/kde/kimap-21.12.1-x86_64-1.txt +-rw-r--r-- 1 root root 234768 2022-01-06 21:38 ./slackware64/kde/kimap-21.12.1-x86_64-1.txz -rw-r--r-- 1 root root 163 2022-01-06 21:38 ./slackware64/kde/kimap-21.12.1-x86_64-1.txz.asc -rw-r--r-- 1 root root 268 2022-01-04 21:35 ./slackware64/kde/kinfocenter-5.23.5-x86_64-1.txt -rw-r--r-- 1 root root 1411476 2022-01-04 21:35 ./slackware64/kde/kinfocenter-5.23.5-x86_64-1.txz @@ -5491,9 +5494,9 @@ drwxr-xr-x 2 root root 65536 2022-02-01 04:47 ./slackware64/x -rw-r--r-- 1 root root 91118036 2021-02-13 13:00 ./slackware64/x/noto-cjk-fonts-ttf-2.001-noarch-3.txz -rw-r--r-- 1 root root 163 2021-02-13 13:00 ./slackware64/x/noto-cjk-fonts-ttf-2.001-noarch-3.txz.asc -rw-r--r-- 1 root root 710 2021-10-01 05:30 ./slackware64/x/noto-fonts-ttf-20171024-noarch-4.txt --rw-r--r-- 1 root root 11603404 2021-10-01 05:30 ./slackware64/x/noto-fonts-ttf-20171024-noarch-4.txz --rw-r--r-- 1 root root 163 2021-10-01 05:30 ./slackware64/x/noto-fonts-ttf-20171024-noarch-4.txz.asc --rw-r--r-- 1 root root 222 2021-02-13 13:11 ./slackware64/x/oclock-1.0.4-x86_64-4.txt +-rw-r--r-- 1 root root 11603404 2021-10-01 05:30 ./slackware64/x/noto-fonts-ttf-20171024-noarch-4.txz +-rw-r--r-- 1 root root 163 2021-10-01 05:30 ./slackware64/x/noto-fonts-ttf-20171024-noarch-4.txz.asc +-rw-r--r-- 1 root root 222 2021-02-13 13:11 ./slackware64/x/oclock-1.0.4-x86_64-4.txt -rw-r--r-- 1 root root 21600 2021-02-13 13:11 ./slackware64/x/oclock-1.0.4-x86_64-4.txz -rw-r--r-- 1 root root 163 2021-02-13 13:11 ./slackware64/x/oclock-1.0.4-x86_64-4.txz.asc -rw-r--r-- 1 root root 366 2021-02-13 13:09 ./slackware64/x/pixman-0.40.0-x86_64-3.txt @@ -15106,10 +15109,10 @@ drwxr-xr-x 2 root root 4096 2021-08-02 18:03 ./source/x/x11/src/util -rw-r--r-- 1 root root 148372 2019-03-16 23:26 ./source/x/x11/src/util/imake-1.0.8.tar.xz -rw-r--r-- 1 root root 106664 2012-03-08 05:51 ./source/x/x11/src/util/lndir-1.0.3.tar.xz -rw-r--r-- 1 root root 136760 2019-03-16 23:42 ./source/x/x11/src/util/makedepend-1.0.6.tar.xz --rw-r--r-- 1 root root 82048 2021-01-24 14:41 ./source/x/x11/src/util/util-macros-1.19.3.tar.xz --rw-r--r-- 1 root root 302744 2021-08-02 01:00 ./source/x/x11/src/util/xorg-cf-files-1.0.7.tar.xz -drwxr-xr-x 2 root root 4096 2020-02-23 17:53 ./source/x/x11/src/xcb --rw-r--r-- 1 root root 53800 2017-03-14 17:55 ./source/x/x11/src/xcb/libpthread-stubs-0.4.tar.xz +-rw-r--r-- 1 root root 82048 2021-01-24 14:41 ./source/x/x11/src/util/util-macros-1.19.3.tar.xz +-rw-r--r-- 1 root root 302744 2021-08-02 01:00 ./source/x/x11/src/util/xorg-cf-files-1.0.7.tar.xz +drwxr-xr-x 2 root root 4096 2020-02-23 17:53 ./source/x/x11/src/xcb +-rw-r--r-- 1 root root 53800 2017-03-14 17:55 ./source/x/x11/src/xcb/libpthread-stubs-0.4.tar.xz -rw-r--r-- 1 root root 247676 2014-10-15 05:34 ./source/x/x11/src/xcb/xcb-util-0.4.0.tar.xz -rw-r--r-- 1 root root 258940 2016-05-12 07:58 ./source/x/x11/src/xcb/xcb-util-cursor-0.1.3.tar.xz -rw-r--r-- 1 root root 251100 2015-04-26 14:14 ./source/x/x11/src/xcb/xcb-util-errors-1.0.tar.xz diff --git a/patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt b/patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt deleted file mode 100644 index 4a843388d..000000000 --- a/patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txt +++ /dev/null @@ -1,11 +0,0 @@ -vim: vim (Vi IMproved) -vim: -vim: Vim is an almost compatible version of the UNIX editor vi. Many new -vim: features have been added: multi level undo, command line history, -vim: filename completion, block operations, and more. -vim: -vim: Vim's development is led by Bram Moolenaar. -vim: -vim: This package also contains the Exuberant Ctags program -vim: written by Darren Hiebert. -vim: diff --git a/patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txt b/patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txt new file mode 100644 index 000000000..4a843388d --- /dev/null +++ b/patches/packages/vim-8.2.4649-x86_64-2_slack15.0.txt @@ -0,0 +1,11 @@ +vim: vim (Vi IMproved) +vim: +vim: Vim is an almost compatible version of the UNIX editor vi. Many new +vim: features have been added: multi level undo, command line history, +vim: filename completion, block operations, and more. +vim: +vim: Vim's development is led by Bram Moolenaar. +vim: +vim: This package also contains the Exuberant Ctags program +vim: written by Darren Hiebert. +vim: diff --git a/patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt b/patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt deleted file mode 100644 index 3b81553b1..000000000 --- a/patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txt +++ /dev/null @@ -1,11 +0,0 @@ -vim-gvim: vim-gvim (gvim, the X/GTK3 enabled version of vim) -vim-gvim: -vim-gvim: Gvim is a graphical version of vim. Vim is an almost compatible -vim-gvim: version of the UNIX editor vi. Many new features have been added, -vim-gvim: such as multi level undo, command line history, filename completion, -vim-gvim: block operations, and more. -vim-gvim: -vim-gvim: The main vim package in the AP series is required to use this package. -vim-gvim: -vim-gvim: Vim's development is led by Bram Moolenaar. -vim-gvim: diff --git a/patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txt b/patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txt new file mode 100644 index 000000000..3b81553b1 --- /dev/null +++ b/patches/packages/vim-gvim-8.2.4649-x86_64-2_slack15.0.txt @@ -0,0 +1,11 @@ +vim-gvim: vim-gvim (gvim, the X/GTK3 enabled version of vim) +vim-gvim: +vim-gvim: Gvim is a graphical version of vim. Vim is an almost compatible +vim-gvim: version of the UNIX editor vi. Many new features have been added, +vim-gvim: such as multi level undo, command line history, filename completion, +vim-gvim: block operations, and more. +vim-gvim: +vim-gvim: The main vim package in the AP series is required to use this package. +vim-gvim: +vim-gvim: Vim's development is led by Bram Moolenaar. +vim-gvim: diff --git a/patches/source/vim/CVE-2022-2816.patch b/patches/source/vim/CVE-2022-2816.patch new file mode 100644 index 000000000..da790fb6d --- /dev/null +++ b/patches/source/vim/CVE-2022-2816.patch @@ -0,0 +1,26 @@ +From dbdd16b62560413abcc3c8e893cc3010ccf31666 Mon Sep 17 00:00:00 2001 +From: Bram Moolenaar +Date: Sun, 14 Aug 2022 21:46:07 +0100 +Subject: [PATCH] patch 9.0.0212: invalid memory access when compiling :unlet + +Problem: Invalid memory access when compiling :unlet. +Solution: Don't read past the end of the line. +--- + +diff --git a/src/vim9cmds.c b/src/vim9cmds.c +index 35a382138bf3..93032d6bf154 100644 +--- a/src/vim9cmds.c ++++ b/src/vim9cmds.c +@@ -92,6 +92,12 @@ free_locals(cctx_T *cctx) + int + check_vim9_unlet(char_u *name) + { ++ if (*name == NUL) ++ { ++ semsg(_(e_argument_required_for_str), "unlet"); ++ return FAIL; ++ } ++ + if (name[1] != ':' || vim_strchr((char_u *)"gwtb", *name) == NULL) + { + // "unlet s:var" is allowed in legacy script. diff --git a/patches/source/vim/CVE-2022-2817.patch b/patches/source/vim/CVE-2022-2817.patch new file mode 100644 index 000000000..d9bfc1a66 --- /dev/null +++ b/patches/source/vim/CVE-2022-2817.patch @@ -0,0 +1,69 @@ +From 249e1b903a9c0460d618f6dcc59aeb8c03b24b20 Mon Sep 17 00:00:00 2001 +From: Bram Moolenaar +Date: Sun, 14 Aug 2022 22:23:02 +0100 +Subject: [PATCH] patch 9.0.0213: using freed memory with error in assert + argument + +Problem: Using freed memory with error in assert argument. +Solution: Make a copy of the error. +--- + +diff --git a/src/testdir/test_assert.vim b/src/testdir/test_assert.vim +index 27b2d73fbfc8..7c9d090b39df 100644 +--- a/src/testdir/test_assert.vim ++++ b/src/testdir/test_assert.vim +@@ -291,6 +291,10 @@ func Test_assert_fail_fails() + let exp = v:exception + endtry + call assert_match("E1174: String required for argument 5", exp) ++ ++ call assert_equal(1, assert_fails('c0', ['', '\1'])) ++ call assert_match("Expected '\\\\\\\\1' but got 'E939: Positive count required: c0': c0", v:errors[0]) ++ call remove(v:errors, 0) + endfunc + + func Test_assert_fails_in_try_block() +diff --git a/src/testing.c b/src/testing.c +index f2355f5dac13..21eb9c18e6e2 100644 +--- a/src/testing.c ++++ b/src/testing.c +@@ -597,6 +597,7 @@ f_assert_fails(typval_T *argvars, typval_T *rettv) + int save_trylevel = trylevel; + int called_emsg_before = called_emsg; + char *wrong_arg_msg = NULL; ++ char_u *tofree = NULL; + + if (check_for_string_or_number_arg(argvars, 0) == FAIL + || check_for_opt_string_or_list_arg(argvars, 1) == FAIL +@@ -660,13 +661,17 @@ f_assert_fails(typval_T *argvars, typval_T *rettv) + } + else if (list->lv_len == 2) + { +- tv = &list->lv_u.mat.lv_last->li_tv; +- actual = get_vim_var_str(VV_ERRMSG); +- expected = tv_get_string_buf_chk(tv, buf); +- if (!pattern_match(expected, actual, FALSE)) ++ // make a copy, an error in pattern_match() may free it ++ tofree = actual = vim_strsave(get_vim_var_str(VV_ERRMSG)); ++ if (actual != NULL) + { +- error_found = TRUE; +- expected_str = expected; ++ tv = &list->lv_u.mat.lv_last->li_tv; ++ expected = tv_get_string_buf_chk(tv, buf); ++ if (!pattern_match(expected, actual, FALSE)) ++ { ++ error_found = TRUE; ++ expected_str = expected; ++ } + } + } + } +@@ -749,6 +754,7 @@ f_assert_fails(typval_T *argvars, typval_T *rettv) + msg_scrolled = 0; + lines_left = Rows; + VIM_CLEAR(emsg_assert_fails_msg); ++ vim_free(tofree); + set_vim_var_string(VV_ERRMSG, NULL, 0); + if (wrong_arg_msg != NULL) + emsg(_(wrong_arg_msg)); diff --git a/patches/source/vim/CVE-2022-2819.patch b/patches/source/vim/CVE-2022-2819.patch new file mode 100644 index 000000000..59c25d8c3 --- /dev/null +++ b/patches/source/vim/CVE-2022-2819.patch @@ -0,0 +1,40 @@ +From d1d8f6bacb489036d0fd479c9dd3c0102c988889 Mon Sep 17 00:00:00 2001 +From: Bram Moolenaar +Date: Sun, 14 Aug 2022 21:28:32 +0100 +Subject: [PATCH] patch 9.0.0211: invalid memory access when compiling :lockvar + +Problem: Invalid memory access when compiling :lockvar. +Solution: Don't read past the end of the line. +--- + +diff --git a/src/vim9cmds.c b/src/vim9cmds.c +index ad32c32ff7cb..35a382138bf3 100644 +--- a/src/vim9cmds.c ++++ b/src/vim9cmds.c +@@ -188,10 +188,17 @@ compile_lock_unlock( + size_t len; + char_u *buf; + isntype_T isn = ISN_EXEC; ++ char *cmd = eap->cmdidx == CMD_lockvar ? "lockvar" : "unlockvar"; + + if (cctx->ctx_skip == SKIP_YES) + return OK; + ++ if (*p == NUL) ++ { ++ semsg(_(e_argument_required_for_str), cmd); ++ return FAIL; ++ } ++ + // Cannot use :lockvar and :unlockvar on local variables. + if (p[1] != ':') + { +@@ -223,8 +230,6 @@ compile_lock_unlock( + ret = FAIL; + else + { +- char *cmd = eap->cmdidx == CMD_lockvar ? "lockvar" : "unlockvar"; +- + if (deep < 0) + vim_snprintf((char *)buf, len, "%s! %s", cmd, p); + else diff --git a/patches/source/vim/vim-gvim.SlackBuild b/patches/source/vim/vim-gvim.SlackBuild index 6eb017081..175391c1c 100755 --- a/patches/source/vim/vim-gvim.SlackBuild +++ b/patches/source/vim/vim-gvim.SlackBuild @@ -32,7 +32,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=vim-gvim VIMBRANCH=8.2 VERSION=$(echo vim-${VIMBRANCH}*.tar.?z | rev | cut -f 3- -d . | cut -f 1 -d - | rev) -BUILD=${BUILD:-1_slack15.0} +BUILD=${BUILD:-2_slack15.0} # The possible settings for this are yes/no/dynamic. PERLINTERP=${PERLINTERP:-dynamic} @@ -111,6 +111,11 @@ find . \ \( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \ -exec chmod 644 {} \+ +# Fix security issues: +zcat $CWD/CVE-2022-2816.patch.gz | patch -p1 --verbose || exit 1 +zcat $CWD/CVE-2022-2817.patch.gz | patch -p1 --verbose || exit 1 +zcat $CWD/CVE-2022-2819.patch.gz | patch -p1 --verbose || exit 1 + config_vim --with-x --enable-gui=gtk3 || exit 1 make $NUMJOBS || make || exit 1 make install DESTDIR=$PKG || exit 1 diff --git a/patches/source/vim/vim.SlackBuild b/patches/source/vim/vim.SlackBuild index 0b4f81322..6b20386d2 100755 --- a/patches/source/vim/vim.SlackBuild +++ b/patches/source/vim/vim.SlackBuild @@ -25,7 +25,7 @@ cd $(dirname $0) ; CWD=$(pwd) PKGNAM=vim VIMBRANCH=8.2 CTAGSVER=5.8 -BUILD=${BUILD:-1_slack15.0} +BUILD=${BUILD:-2_slack15.0} # The possible settings for this are yes/no/dynamic. PERLINTERP=${PERLINTERP:-dynamic} @@ -152,6 +152,11 @@ find . \ \( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 -o -perm 400 \) \ -exec chmod 644 {} \+ +# Fix security issues: +zcat $CWD/CVE-2022-2816.patch.gz | patch -p1 --verbose || exit 1 +zcat $CWD/CVE-2022-2817.patch.gz | patch -p1 --verbose || exit 1 +zcat $CWD/CVE-2022-2819.patch.gz | patch -p1 --verbose || exit 1 + config_vim --without-x --disable-gui || exit 1 make $NUMJOBS || make || exit 1 make install DESTDIR=$PKG || exit 1 diff --git a/recompress.sh b/recompress.sh index 68ef7707a..bed7ee460 100755 --- a/recompress.sh +++ b/recompress.sh @@ -1181,8 +1181,11 @@ gzip ./patches/source/python3/python3.distutils.x86_64.diff gzip ./patches/source/seamonkey/autoconf/autoconf-2.13-consolidated_fixes-1.patch gzip ./patches/source/seamonkey/doinst.sh gzip ./patches/source/seamonkey/sm.ui.scrollToClick.diff +gzip ./patches/source/vim/CVE-2022-2819.patch gzip ./patches/source/vim/ctags.use-conventional-unused-marker.patch gzip ./patches/source/vim/vim.vimrc.diff +gzip ./patches/source/vim/CVE-2022-2817.patch +gzip ./patches/source/vim/CVE-2022-2816.patch gzip ./patches/source/libxslt/libxslt.xsltMaxDepth.diff gzip ./patches/source/net-snmp/net-snmp-5.7.2-cert-path.patch gzip ./patches/source/net-snmp/net-snmp-5.8-Remove-U64-typedef.patch -- cgit v1.2.3