FEDORA-2022-40161673a3 — security update for vim

stable

vim-9.0.720-1.fc36

FEDORA-2022-40161673a3 created by zdohnal 2 years ago for Fedora 36

The newest upstream commit

Security fixes for CVE-2022-3256, CVE-2022-3324, CVE-2022-3352, CVE-2022-3235, CVE-2022-3234, CVE-2022-3296, CVE-2022-3297, CVE-2022-3278.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-40161673a3

This update has been submitted for testing by zdohnal.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

zdohnal edited this update.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

bojan commented & provided feedback 2 years ago

karma

Works.

filiperosset commented & provided feedback a year ago

karma

no regressions noted

This update can be pushed to stable now if the maintainer wishes

a year ago

t3rm1n4l commented & provided feedback a year ago

karma

wfm

This update has been submitted for stable by bodhi.

a year ago

vtrefny provided feedback a year ago

karma

This update has been pushed to stable.

a year ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

vim-9.0.720-1.fc36

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

a year ago

modified

2 years ago

BZ#2129370 CVE-2022-3234 vim: Heap-based Buffer Overflow

BZ#2129371 CVE-2022-3235 vim: Use After Free

BZ#2129831 CVE-2022-3278 vim: null pointer dereference in eval_next_non_blank() in eval.c

BZ#2129833 CVE-2022-3278 vim: null pointer dereference in eval_next_non_blank() in eval.c [fedora-all]

BZ#2129835 CVE-2022-3296 vim: stack buffer overflow in ex_finally() in ex_eval.c

BZ#2129836 CVE-2022-3296 vim: stack buffer overflow in ex_finally() in ex_eval.c [fedora-all]

BZ#2129838 CVE-2022-3297 vim: use-after-free in process_next_cpt_value() at insexpand.c

BZ#2129839 CVE-2022-3297 vim: use-after-free in process_next_cpt_value() at insexpand.c [fedora-all]

BZ#2130582 CVE-2022-3234 vim: Heap-based Buffer Overflow [fedora-all]

BZ#2130583 CVE-2022-3235 vim: Use After Free [fedora-all]

BZ#2131087 CVE-2022-3352 vim: use after free

BZ#2131306 CVE-2022-3352 vim: use after free [fedora-all]

BZ#2132558 CVE-2022-3324 vim: stack buffer overflow in win_redr_ruler() at drawscreen.c

BZ#2132559 CVE-2022-3324 vim: stack buffer overflow in win_redr_ruler() at drawscreen.c [fedora-all]

BZ#2132571 CVE-2022-3256 vim: use-after-free in movemark() at mark.c

BZ#2132572 CVE-2022-3256 vim: use-after-free in movemark() at mark.c [fedora-all]

vim-9.0.720-1.fc36

Automated Test Results

passed