mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-02 05:33:57 -09:00
95dad8f85c
For changes, see: - https://github.com/vim/vim/compare/v9.1.2017...v9.1.2148 Fixes the following vulnerabilities: - CVE-2026-25749: Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132. For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-25749 -0714b15940- CVE-2026-26269: Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148. For more information, see: - https://www.cve.org/CVERecord?id=CVE-2026-26269 -c5f312aad8Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Julien Olivain <ju.o@free.fr>
87 lines
2.1 KiB
Makefile
87 lines
2.1 KiB
Makefile
################################################################################
|
|
#
|
|
# vim
|
|
#
|
|
################################################################################
|
|
|
|
VIM_VERSION = 9.1.2148
|
|
VIM_SITE = $(call github,vim,vim,v$(VIM_VERSION))
|
|
VIM_DEPENDENCIES = ncurses $(TARGET_NLS_DEPENDENCIES)
|
|
VIM_SUBDIR = src
|
|
VIM_CONF_ENV = \
|
|
vim_cv_toupper_broken=no \
|
|
vim_cv_terminfo=yes \
|
|
vim_cv_tgetent=zero \
|
|
vim_cv_tty_group=world \
|
|
vim_cv_tty_mode=0620 \
|
|
vim_cv_getcwd_broken=no \
|
|
vim_cv_stat_ignores_slash=yes \
|
|
vim_cv_memmove_handles_overlap=yes \
|
|
ac_cv_sizeof_int=4 \
|
|
ac_cv_small_wchar_t=no
|
|
# GUI/X11 headers leak from the host so forcibly disable them
|
|
VIM_CONF_OPTS = --with-tlib=ncurses --enable-gui=no --without-x
|
|
VIM_LICENSE = Charityware
|
|
VIM_LICENSE_FILES = LICENSE README.txt
|
|
VIM_CPE_ID_VENDOR = vim
|
|
|
|
ifeq ($(BR2_PACKAGE_ACL),y)
|
|
VIM_CONF_OPTS += --enable-acl
|
|
VIM_DEPENDENCIES += acl
|
|
else
|
|
VIM_CONF_OPTS += --disable-acl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_GPM),y)
|
|
VIM_CONF_OPTS += --enable-gpm
|
|
VIM_DEPENDENCIES += gpm
|
|
else
|
|
VIM_CONF_OPTS += --disable-gpm
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
|
|
VIM_CONF_OPTS += --enable-selinux
|
|
VIM_DEPENDENCIES += libselinux
|
|
else
|
|
VIM_CONF_OPTS += --disable-selinux
|
|
endif
|
|
|
|
VIM_INSTALL_TARGETS = \
|
|
installvimbin installpack \
|
|
installtools installlinks
|
|
|
|
ifeq ($(BR2_PACKAGE_VIM_RUNTIME),y)
|
|
VIM_INSTALL_TARGETS += installrtbase installmacros
|
|
endif
|
|
|
|
define VIM_INSTALL_TARGET_CMDS
|
|
$(TARGET_MAKE_ENV) $(MAKE) -C $(@D)/src DESTDIR=$(TARGET_DIR) \
|
|
$(VIM_INSTALL_TARGETS)
|
|
$(RM) -rf $(TARGET_DIR)/usr/share/vim/vim*/doc/
|
|
endef
|
|
|
|
# Avoid oopses with vipw/vigr (from package shadow), lack of $EDITOR,
|
|
# or other packages expecting plain 'vi' command to exist.
|
|
ifeq ($(BR2_ROOTFS_MERGED_USR),y)
|
|
define VIM_INSTALL_VI_SYMLINK
|
|
ln -sf vim $(TARGET_DIR)/usr/bin/vi
|
|
endef
|
|
else
|
|
define VIM_INSTALL_VI_SYMLINK
|
|
ln -sf ../usr/bin/vim $(TARGET_DIR)/bin/vi
|
|
endef
|
|
endif
|
|
VIM_POST_INSTALL_TARGET_HOOKS += VIM_INSTALL_VI_SYMLINK
|
|
|
|
HOST_VIM_DEPENDENCIES = host-ncurses
|
|
HOST_VIM_CONF_OPTS = \
|
|
--with-tlib=ncurses \
|
|
--enable-gui=no \
|
|
--without-x \
|
|
--disable-acl \
|
|
--disable-gpm \
|
|
--disable-selinux
|
|
|
|
$(eval $(autotools-package))
|
|
$(eval $(host-autotools-package))
|