Re: [OE-core] [PATCH] vim: fix 2021-3796

2021-10-23 Thread Minjae Kim
Hi Alexandre, I updated the patch and I got a build success on my machine as below. Thanks for notice :) /poky/master/poky/meta$ bitbake vim -c cleanall; bitbake vim -C compile Loading cache: 100% |#

Re: [OE-core] [PATCH] vim: fix 2021-3796

2021-10-23 Thread Alexandre Belloni
Hello, On 22/10/2021 11:45:06+0900, Minjae Kim wrote: > vim is vulnerable to Use After Free > Problem:Checking first character of url twice. > > reference: > https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 > --- > .../vim/files/CVE-2021-3796.patch | 70

[OE-core] [PATCH] vim: fix 2021-3796

2021-10-21 Thread Minjae Kim
vim is vulnerable to Use After Free Problem:Checking first character of url twice. reference: https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 --- .../vim/files/CVE-2021-3796.patch | 70 +++ meta/recipes-support/vim/vim.inc |