FEDORA-2021-b0ac29efb1 — security update for vim

stable

vim-8.2.3755-1.fc34

FEDORA-2021-b0ac29efb1 created by zdohnal 4 years ago for Fedora 34

Security fix for CVE-2021-4069

Security fixes for CVE-2021-3984, CVE-2021-4019

2026651 - defaults.vim changes create conflicts between vim-minimal and vim-common

Security fix for CVE-2021-3968

Security fix for CVE-2021-3973

Security fix for CVE-2021-3974

Security fix for CVE-2021-3927 and CVE-2021-3928

The newest upstream commit

Security fix for CVE-2021-3903

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-b0ac29efb1

This update has been submitted for testing by zdohnal.

4 years ago

This update's test gating status has been changed to 'waiting'.

4 years ago

This update has obsoleted vim-8.2.3717-1.fc34, and has inherited its bugs and notes.

4 years ago

This update's test gating status has been changed to 'failed'.

4 years ago

This update's test gating status has been changed to 'passed'.

4 years ago

This update has been pushed to testing.

4 years ago

suve provided feedback 4 years ago

karma

demiobenour commented & provided feedback 4 years ago

karma

Works for me!

This update can be pushed to stable now if the maintainer wishes

4 years ago

This update has been submitted for stable by zdohnal.

4 years ago

This update has been pushed to stable.

4 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

4 years ago

in testing

4 years ago

in stable

4 years ago

Builds

vim-8.2.3755-1.fc34

BZ#2018558 CVE-2021-3903 vim: heap-based buffer overflow vulnerability

BZ#2018559 CVE-2021-3903 vim: heap-based buffer overflow vulnerability [fedora-all]

BZ#2021290 CVE-2021-3927 vim: heap-based buffer overflow in gchar_cursor() in misc1.c

BZ#2021291 CVE-2021-3927 vim: heap-based buffer overflow in gchar_cursor() in misc1.c [fedora-all]

BZ#2021292 CVE-2021-3928 vim: stack-based buffer overflow in spell_iswordp() in spell.c

BZ#2021293 CVE-2021-3928 vim: stack-based buffer overflow in spell_iswordp() in spell.c [fedora-all]

BZ#2025056 CVE-2021-3968 vim: Heap use-after-free in ml_append_int function

BZ#2025058 CVE-2021-3968 vim: Heap use-after-free in ml_append_int function [fedora-all]

BZ#2025059 CVE-2021-3973 vim: Heap based buffer overflow in findfile.c

BZ#2025060 CVE-2021-3973 vim: Heap based buffer overflow in findfile.c [fedora-all]

BZ#2025061 CVE-2021-3974 vim: Use after free in regexp_nfa.c

BZ#2025062 CVE-2021-3974 vim: Use after free in regexp_nfa.c [fedora-all]

BZ#2026651 defaults.vim changes create conflicts between vim-minimal and vim-common

BZ#2028122 CVE-2021-3984 vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

BZ#2028212 CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in help.c

BZ#2028213 CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [fedora-all]

BZ#2028339 CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [fedora-all]

BZ#2029513 CVE-2021-4069 vim: use-after-free in ex_open() in src/ex_docmd.c

BZ#2029514 CVE-2021-4069 vim: use-after-free in ex_open() in src/ex_docmd.c [fedora-all]

vim-8.2.3755-1.fc34

Automated Test Results

passed