diff options
| author | Patrick J Volkerding <volkerdi@slackware.com> | 2022-03-30 22:37:05 +0000 |
|---|---|---|
| committer | Eric Hameleers <alien@slackware.com> | 2022-03-31 13:29:48 +0200 |
| commit | 287bf2688a66ef594d63776ba1b09ec52612c9dd (patch) | |
| tree | 7f71d336978d5e1c88f9baa1ded36ac4a393eec6 /ChangeLog.txt | |
| parent | 64d851e17a86f13f77387a62a782a53f28399d26 (diff) | |
| download | current-287bf2688a66ef594d63776ba1b09ec52612c9dd.tar.gz | |
Wed Mar 30 22:37:05 UTC 202220220330223705_15.0
patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txz: Upgraded.
Fixes a use-after-free in utf_ptr2char in vim/vim prior to 8.2.4646.
This vulnerability is capable of crashing software, bypassing protection
mechanisms, modifying memory, and possibly execution of arbitrary code.
Thanks to marav for the heads-up.
For more information, see:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154
https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425
https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5
(* Security fix *)
patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txz: Upgraded.
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index d3046b57..cba14703 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,16 @@ +Wed Mar 30 22:37:05 UTC 2022 +patches/packages/vim-8.2.4649-x86_64-1_slack15.0.txz: Upgraded. + Fixes a use-after-free in utf_ptr2char in vim/vim prior to 8.2.4646. + This vulnerability is capable of crashing software, bypassing protection + mechanisms, modifying memory, and possibly execution of arbitrary code. + Thanks to marav for the heads-up. + For more information, see: + https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1154 + https://huntr.dev/bounties/7f0ec6bc-ea0e-45b0-8128-caac72d23425 + https://github.com/vim/vim/commit/b55986c52d4cd88a22d0b0b0e8a79547ba13e1d5 + (* Security fix *) +patches/packages/vim-gvim-8.2.4649-x86_64-1_slack15.0.txz: Upgraded. ++--------------------------+ Mon Mar 28 19:33:46 UTC 2022 patches/packages/whois-5.5.12-x86_64-1_slack15.0.txz: Upgraded. This is a bugfix release. Thanks to Nobby6. |