Subject: [alpine-aports] [PATCH v3.5] main/vim: security upgrade to 8.0.0329 - fixes #6863

From: Sergei Lukin <[email-masked]>
Date: Wed, 15 Feb 2017 15:40:19 +0000

CVE-2017-5953: Tree length values not validated properly when handling a spell file
---
 main/vim/APKBUILD | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/main/vim/APKBUILD b/main/vim/APKBUILD
index 9043e6892e..285e16fe32 100644
--- a/main/vim/APKBUILD
+++ b/main/vim/APKBUILD
@@ -1,8 +1,9 @@
+# Contributor: Sergei Lukin <[email-masked]>
 # Contributor: Łukasz Jendrysik <[email-masked]>
 # Contributor: Sören Tempel <[email-masked]>
 # Maintainer: Natanael Copa <[email-masked]>
 pkgname=vim
-pkgver=8.0.0056
+pkgver=8.0.0329
 pkgrel=0
 pkgdesc="advanced text editor"
 url="http://www.vim.org"
@@ -16,6 +17,8 @@ source="$pkgname-$pkgver.tar.gz::https://github.com/$pkgname/$pkgname/archive/v$
 	"
 
 # secfixes:
+#   8.0.0329-r0:
+#     - CVE-2017-5953
 #   8.0.0056-r0:
 #     - CVE-2016-1248
 
@@ -61,9 +64,9 @@ vimdiff() {
 	mv "$pkgdir"/usr/bin/vimdiff "$subpkgdir"/usr/bin
 }
 
-md5sums="143ab023fdf3eeaaad6c13efb5e175e5  vim-8.0.0056.tar.gz
+md5sums="a641ba6135afb64cc81dc8c2cdd63353  vim-8.0.0329.tar.gz
 97aecde2ab504e543a96bec84b3b5638  vimrc"
-sha256sums="59ea9e9b26e4566e4bcc7d7aa410f91d1e2e6b194e5de6fe26bcdbd3ab7d9a7c  vim-8.0.0056.tar.gz
+sha256sums="6fbe0ec1228f951ba598b48ac8033f41ca4934cc34689a6008685e7c26477ae2  vim-8.0.0329.tar.gz
 7ac7e5fd75fe315fd8b3ca4172056ebb9f06df0b5985d3ff88133dfcdd87076b  vimrc"
-sha512sums="07d9f8b99a37cea1d0794dae483a2708b1b2d9762dcbb672528a191fb684e6d536a14819e631a7f1f6fd2bd0163450e6269cbd095500d121ab26aaed7b91bc26  vim-8.0.0056.tar.gz
+sha512sums="f2f7f07408f500abc846e5d7ef10472a7aa5dea341fcc576c9487a2ff77acbf8e5a1f0324f8a8a29472e5505dabf5f652ee4d0fca0d017818fe39fceaa956c5b  vim-8.0.0329.tar.gz
 d9586b777881973cb5e48e18750336a522ed72c3127b2d6b6991e2b943468ca5b694476e7fa39ab469178c1375fc8f52627484e0fe377aea5811a513e35a7b02  vimrc"
-- 
2.11.1

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---