From ce534e8e16f0d880aeae6477e57d1b7b86833a35 Mon Sep 17 00:00:00 2001 From: Ross Burton Date: Tue, 9 Nov 2021 23:13:07 +0000 Subject: vim: fix CVE-2021-3796, CVE-2021-3872, and CVE-2021-3875 Backport patches from upstream to fix these CVEs. (From OE-Core rev: b493eb4f9a6bb75a2f01a53b6c70762845bf79f9) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie --- meta/recipes-support/vim/vim.inc | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'meta/recipes-support/vim/vim.inc') diff --git a/meta/recipes-support/vim/vim.inc b/meta/recipes-support/vim/vim.inc index 50e215d20f..943856e07c 100644 --- a/meta/recipes-support/vim/vim.inc +++ b/meta/recipes-support/vim/vim.inc @@ -18,8 +18,12 @@ SRC_URI = "git://github.com/vim/vim.git;branch=master;protocol=https \ file://no-path-adjust.patch \ file://racefix.patch \ file://b7081e135a16091c93f6f5f7525a5c58fb7ca9f9.patch \ - file://CVE-2021-3778.patch \ -" + file://CVE-2021-3778.patch \ + file://0002-patch-8.2.3428-using-freed-memory-when-replacing.patch \ + file://0003-patch-8.2.3487-illegal-memory-access-if-buffer-name-.patch \ + file://0004-patch-8.2.3489-ml_get-error-after-search-with-range.patch \ + file://0005-patch-8.2.3564-invalid-memory-access-when-scrolling-.patch \ + " SRCREV = "98056533b96b6b5d8849641de93185dd7bcadc44" -- cgit v1.2.3-54-g00ecf