269390 – sysutils/tmux: Patch CVE-2022-47016

Bug 269390 - sysutils/tmux: Patch CVE-2022-47016

Summary: sysutils/tmux: Patch CVE-2022-47016

Status:	Closed FIXED

Alias:	None

Product:	Ports & Packages
Classification:	Unclassified
Component:	Individual Port(s) (show other bugs)
Version:	Latest
Hardware:	Any Any

Importance:	--- Affects Only Me
Assignee:	Mathieu Arnold

URL:	https://nvd.nist.gov/vuln/detail/CVE-...
Keywords:

Depends on:
Blocks:

Reported:	2023-02-07 17:57 UTC by Daniel Engberg
Modified:	2023-02-22 12:05 UTC (History)
CC List:	0 users

See Also:

Flags:	bugzilla: maintainer-feedback? (mat)

Attachments
Patch for tmux (3.17 KB, patch) 2023-02-07 17:57 UTC, Daniel Engberg	no flags	Details \| Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Engberg freebsd_committer

2023-02-07 17:57:56 UTC

Created attachment 239973 [details]
Patch for tmux

Patch obtained from Alpine Linux's repo

Upstream commit: https://github.com/tmux/tmux/commit/e86752820993a00e3d28350cbe46878ba95d9012

References:
https://github.com/advisories/GHSA-59wm-qx44-pj6w
https://nvd.nist.gov/vuln/detail/CVE-2022-47016

Source:
https://github.com/archlinux/svntogit-community/blob/packages/tmux/trunk/CVE-2022-47016.patch

Comment 1 Daniel Engberg freebsd_committer

2023-02-20 15:15:13 UTC

Friendly ping

Comment 2 commit-hook freebsd_committer

2023-02-22 12:00:28 UTC

A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=0610124469717aef109a8b83c4d303f1facb149c

commit 0610124469717aef109a8b83c4d303f1facb149c
Author:     Daniel Engberg <diizzy@FreeBSD.org>
AuthorDate: 2023-02-22 11:58:25 +0000
Commit:     Mathieu Arnold <mat@FreeBSD.org>
CommitDate: 2023-02-22 11:59:34 +0000

    sysutils/tmux: fix some NULL pointer

    PR:     269390

 sysutils/tmux/Makefile                         |  1 +
 sysutils/tmux/files/patch-e86752820993a0 (new) | 54 ++++++++++++++++++++++++++
 2 files changed, 55 insertions(+)

Comment 3 commit-hook freebsd_committer

2023-02-22 12:05:30 UTC

A commit in branch 2023Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=0605420a979476493a5ad3988f13014ff75adc3a

commit 0605420a979476493a5ad3988f13014ff75adc3a
Author:     Daniel Engberg <diizzy@FreeBSD.org>
AuthorDate: 2023-02-22 11:58:25 +0000
Commit:     Mathieu Arnold <mat@FreeBSD.org>
CommitDate: 2023-02-22 12:00:35 +0000

    sysutils/tmux: fix some NULL pointer

    PR:     269390
    (cherry picked from commit 0610124469717aef109a8b83c4d303f1facb149c)

 sysutils/tmux/Makefile                         |  1 +
 sysutils/tmux/files/patch-e86752820993a0 (new) | 54 ++++++++++++++++++++++++++
 2 files changed, 55 insertions(+)