Re: [OE-core] [dunfell][PATCH v2] vim: fix 2021-3796

2021-10-25 Thread Steve Sakoman
On Mon, Oct 25, 2021 at 7:59 AM Steve Sakoman via lists.openembedded.org wrote: > > On Mon, Oct 25, 2021 at 6:43 AM Steve Sakoman via > lists.openembedded.org > wrote: > > > > On Sun, Oct 24, 2021 at 9:29 PM Minjae Kim wrote: > > > > > > vim is vulnerable to Use After Free > > > Problem: Checkin

Re: [OE-core] [dunfell][PATCH v2] vim: fix 2021-3796

2021-10-25 Thread Steve Sakoman
On Mon, Oct 25, 2021 at 6:43 AM Steve Sakoman via lists.openembedded.org wrote: > > On Sun, Oct 24, 2021 at 9:29 PM Minjae Kim wrote: > > > > vim is vulnerable to Use After Free > > Problem: Checking first character of url twice. > > > > reference: > > https://github.com/vim/vim/commit/35a9a00afc

Re: [OE-core] [dunfell][PATCH v2] vim: fix 2021-3796

2021-10-25 Thread Steve Sakoman
On Sun, Oct 24, 2021 at 9:29 PM Minjae Kim wrote: > > vim is vulnerable to Use After Free > Problem: Checking first character of url twice. > > reference: > https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 > > Signed-off-by: Minjae Kim > --- > .../vim/files/CVE-2021-379

[OE-core] [dunfell][PATCH v2] vim: fix 2021-3796

2021-10-25 Thread Minjae Kim
vim is vulnerable to Use After Free Problem: Checking first character of url twice. reference: https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 Signed-off-by: Minjae Kim --- .../vim/files/CVE-2021-3796.patch | 50 +++ 1 file changed, 50 inse