CVE-2017-5953: Tree length values not validated properly when handling a spell file
---
main/vim/APKBUILD | 11 +++++++----
1 file changed, 7 insertions(+), 4 deletions(-)
diff --git a/main/vim/APKBUILD b/main/vim/APKBUILD
index 9043e6892e..285e16fe32 100644
--- a/main/vim/APKBUILD
+++ b/main/vim/APKBUILD
@@ -1,8 +1,9 @@
+# Contributor: Sergei Lukin <sergej.lukin@gmail.com>
# Contributor: Łukasz Jendrysik <scadu@yandex.com>
# Contributor: Sören Tempel <soeren+alpine@soeren-tempel.net>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=vim
-pkgver=8.0.0056
+pkgver=8.0.0329
pkgrel=0
pkgdesc="advanced text editor"
url="http://www.vim.org"
@@ -16,6 +17,8 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/$pkgname/$pkgname/archive/v$
"
# secfixes:
+# 8.0.0329-r0:
+# - CVE-2017-5953
# 8.0.0056-r0:
# - CVE-2016-1248
@@ -61,9 +64,9 @@ vimdiff() {
mv "$pkgdir"/usr/bin/vimdiff "$subpkgdir"/usr/bin
}
-md5sums="143ab023fdf3eeaaad6c13efb5e175e5 vim-8.0.0056.tar.gz
+md5sums="a641ba6135afb64cc81dc8c2cdd63353 vim-8.0.0329.tar.gz
97aecde2ab504e543a96bec84b3b5638 vimrc"
-sha256sums="59ea9e9b26e4566e4bcc7d7aa410f91d1e2e6b194e5de6fe26bcdbd3ab7d9a7c vim-8.0.0056.tar.gz
+sha256sums="6fbe0ec1228f951ba598b48ac8033f41ca4934cc34689a6008685e7c26477ae2 vim-8.0.0329.tar.gz
7ac7e5fd75fe315fd8b3ca4172056ebb9f06df0b5985d3ff88133dfcdd87076b vimrc"
-sha512sums="07d9f8b99a37cea1d0794dae483a2708b1b2d9762dcbb672528a191fb684e6d536a14819e631a7f1f6fd2bd0163450e6269cbd095500d121ab26aaed7b91bc26 vim-8.0.0056.tar.gz
+sha512sums="f2f7f07408f500abc846e5d7ef10472a7aa5dea341fcc576c9487a2ff77acbf8e5a1f0324f8a8a29472e5505dabf5f652ee4d0fca0d017818fe39fceaa956c5b vim-8.0.0329.tar.gz
d9586b777881973cb5e48e18750336a522ed72c3127b2d6b6991e2b943468ca5b694476e7fa39ab469178c1375fc8f52627484e0fe377aea5811a513e35a7b02 vimrc"
--
2.11.1
---
Unsubscribe: alpine-aports+unsubscribe@lists.alpinelinux.org
Help: alpine-aports+help@lists.alpinelinux.org
---