Re: [OE-core] [PATCH v2] vim: fix 2021-3796

2021-10-25 Thread Alexandre Belloni
Hello, Unless I'm doing something wrong, this still fails to apply: https://autobuilder.yoctoproject.org/typhoon/#/builders/52/builds/4207/steps/11/logs/stdio On 24/10/2021 15:40:42+0900, Minjae Kim wrote: > vim is vulnerable to Use After Free > Problem: Checking first character of url twice. >

[OE-core] [PATCH v2] vim: fix 2021-3796

2021-10-23 Thread Minjae Kim
vim is vulnerable to Use After Free Problem: Checking first character of url twice. reference: https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 --- .../vim/files/CVE-2021-3796.patch | 50 +++ meta/recipes-support/vim/vim.inc | 3