Re: git: 6d2a147ae558 - main - libedit: fix use after free

From: Daroussin <bapt_at_FreeBSD.org>
Date: Thu, 05 Mar 2026 19:09:10 UTC

Le 5 mars 2026 18:49:51 GMT+01:00, Shawn Webb <shawn.webb@hardenedbsd.org> a écrit :
>On Thu, Mar 05, 2026 at 04:13:25PM +0000, Baptiste Daroussin wrote:
>> The branch main has been updated by bapt:
>> 
>> URL: https://cgit.FreeBSD.org/src/commit/?id=6d2a147ae558ef423e3df451a9049200b291a8d0
>> 
>> commit 6d2a147ae558ef423e3df451a9049200b291a8d0
>> Author:     Baptiste Daroussin <bapt@FreeBSD.org>
>> AuthorDate: 2026-03-05 16:12:51 +0000
>> Commit:     Baptiste Daroussin <bapt@FreeBSD.org>
>> CommitDate: 2026-03-05 16:13:08 +0000
>> 
>>     libedit: fix use after free
>> ---
>>  contrib/libedit/map.c | 4 ++--
>>  1 file changed, 2 insertions(+), 2 deletions(-)
>
>Hey Baptiste,
>
>UAF bugs are typically thought to be security issues. Does this
>particular fix warrant a security advisory? The log is unfortunately
>lacking much useful metadata usually included in these kinds of
>commits.
>
>Thanks,
>

this issue has been in the tree just a few hours and never in a release.

best regards,
Bapt