vim: CVE-2021-3778

Debian Bug report logs - #994498
vim: CVE-2021-3778

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: vim: CVE-2021-3778

Date: Thu, 16 Sep 2021 20:45:29 +0200

Source: vim
Version: 2:8.2.2434-3
Severity: important
Tags: security upstream
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>

Hi,

The following vulnerability was published for vim.

CVE-2021-3778[0]:
| vim is vulnerable to Heap-based Buffer Overflow

Can you batch this one as well for the planned point release, please?

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-3778
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3778
[1] https://huntr.dev/bounties/d9c17308-2c99-4f9f-a706-f7f72c24c273
[2] https://github.com/vim/vim/commit/65b605665997fad54ef39a93199e305af2fe4d7f

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore

Message #14 received at 994498-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: control@bugs.debian.org

Cc: 994076-submitter@bugs.debian.org, 994497-submitter@bugs.debian.org, 994498-submitter@bugs.debian.org

Subject: closing 994076, closing 994498, closing 994497

Date: Thu, 30 Sep 2021 21:57:21 +0200

close 994076 2:8.2.3455-1
close 994498 2:8.2.3455-1
close 994497 2:8.2.3455-1
thanks

manually close the bugs as they were not catched by the regexp mathcing the
closes markers, cf.
https://tracker.debian.org/news/1263258/accepted-vim-2823455-1-source-into-unstable/

Send a report that this bug log contains spam.