Source: vim Version: 2:8.2.2434-3 Severity: important Tags: security upstream X-Debbugs-Cc: [email protected], Debian Security Team <[email protected]>
Hi, The following vulnerability was published for vim. CVE-2021-3770[0]: | vim is vulnerable to Heap-based Buffer Overflow The fix is at [1] but needed a followup [2]. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2021-3770 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3770 [1] https://github.com/vim/vim/commit/b7081e135a16091c93f6f5f7525a5c58fb7ca9f9 [2] https://github.com/vim/vim/commit/2ddb89f8a94425cda1e5491efc80c1ccccb6e08e [3] https://huntr.dev/bounties/016ad2f2-07c1-4d14-a8ce-6eed10729365/ Regards, Salvatore
