[DragonFlyBSD - Bug #3360] (Resolved) A bug in contrib/less/line.c

[bugtracker-admin at leaf.dragonflybsd.org]

Issue #3360 has been updated by liweitianux.

Category set to Vendor software
Status changed from New to Resolved
% Done changed from 0 to 100

Sorry for the delay.

Just updated less to the latest version 643.

Thank you.

----------------------------------------
Bug #3360: A bug in contrib/less/line.c
http://bugs.dragonflybsd.org/issues/3360#change-14536

* Author: ChenHaoLu
* Status: Resolved
* Priority: High
* Category: Vendor software
* Target version: 6.6
* Start date: 2023-10-24
----------------------------------------
h3. Version

latest on branch master in the git repo [[https://github.com/DragonFlyBSD/DragonFlyBSD]]
h3. Description

DragonFlyBSD uses less[[https://github.com/gwsw/less]]. However, the current version of less which DragonflyBSD used contains a CVE[[CVE-2022-46663]]. This needed to be fixed in DragonFlyBSD.

h3. CVE Information
CVE-2022-46663's description:[[https://nvd.nist.gov/vuln/detail/CVE-2022-46663]]
CVE-2022-46663's patch commit:[[https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c]]



-- 
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account