vim: CVE-2021-3796

Debian Bug report logs - #994497
vim: CVE-2021-3796

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: vim: CVE-2021-3796

Date: Thu, 16 Sep 2021 20:43:05 +0200

Source: vim
Version: 2:8.2.2434-3
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>

Hi,

The following vulnerability was published for vim.

CVE-2021-3796[0]:
| vim is vulnerable to Use After Free

James, maybe this can be batched as well with the planned point
release update.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-3796
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3796
[1] https://huntr.dev/bounties/ab60b7f3-6fb1-4ac2-a4fa-4d592e08008d/
[2] https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Message #14 received at 994497-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: control@bugs.debian.org

Cc: 994076-submitter@bugs.debian.org, 994497-submitter@bugs.debian.org, 994498-submitter@bugs.debian.org

Subject: closing 994076, closing 994498, closing 994497

Date: Thu, 30 Sep 2021 21:57:21 +0200

close 994076 2:8.2.3455-1
close 994498 2:8.2.3455-1
close 994497 2:8.2.3455-1
thanks

manually close the bugs as they were not catched by the regexp mathcing the
closes markers, cf.
https://tracker.debian.org/news/1263258/accepted-vim-2823455-1-source-into-unstable/

Send a report that this bug log contains spam.