FEDORA-2022-719f3ec21b — security update for vim

stable

vim-8.2.5172-1.fc36

FEDORA-2022-719f3ec21b created by zdohnal 2 years ago for Fedora 36

Security fixes for CVE-2022-2124, CVE-2022-2129, CVE-2022-2125, CVE-2022-2126, CVE-2022-1720, CVE-2022-2175, CVE-2022-2182, CVE-2022-2183, CVE-2022-2231, CVE-2022-2210, CVE-2022-2208, CVE-2022-2207, CVE-2022-2206

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-719f3ec21b

This update has been submitted for testing by zdohnal.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

imabug provided feedback 2 years ago

karma

zdohnal edited this update.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

nixuser commented & provided feedback 2 years ago

karma

This is working fine.

This update can be pushed to stable now if the maintainer wishes

2 years ago

bojan commented & provided feedback 2 years ago

karma

Works.

This update has been submitted for stable by bodhi.

2 years ago

vtrefny provided feedback 2 years ago

karma

andilinux commented & provided feedback 2 years ago

karma

works

andilinux commented & provided feedback 2 years ago

karma

works

andilinux commented & provided feedback 2 years ago

karma

works

andilinux commented & provided feedback 2 years ago

karma

works

andilinux commented & provided feedback 2 years ago

karma

works

zdohnal edited this update.

2 years ago

zdohnal edited this update.

2 years ago

zdohnal edited this update.

2 years ago

zdohnal edited this update.

2 years ago

zdohnal edited this update.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

Builds

vim-8.2.5172-1.fc36

BZ#2099558 CVE-2022-2124 vim: out of bounds read in current_quote()

BZ#2099559 CVE-2022-2124 vim: out of bounds read in current_quote() [fedora-all]

BZ#2099586 CVE-2022-2129 vim: out of bounds write in vim_regsub_both()

BZ#2099588 CVE-2022-2129 vim: out of bounds write in vim_regsub_both() [fedora-all]

BZ#2099590 CVE-2022-2125 vim: out of bounds read in get_lisp_indent()

BZ#2099591 CVE-2022-2125 vim: out of bounds read in get_lisp_indent() [fedora-all]

BZ#2099596 CVE-2022-2126 vim: out of bounds read in suggest_trie_walk()

BZ#2099597 CVE-2022-2126 vim: out of bounds read in suggest_trie_walk() [fedora-all]

BZ#2099979 CVE-2022-1720 vim: buffer over-read in grab_file_name() in findfile.c

BZ#2099980 CVE-2022-1720 vim: buffer over-read in grab_file_name() in findfile.c [fedora-all]

BZ#2101293 CVE-2022-2175 vim: buffer over-read in put_on_cmdline() at ex_getln.c

BZ#2101815 CVE-2022-2175 vim: Buffer Over-read through cmdline_insert_reg() [fedora-all]

BZ#2102153 CVE-2022-2182 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char

BZ#2102154 CVE-2022-2182 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char [fedora-all]

BZ#2102159 CVE-2022-2183 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent

BZ#2102160 CVE-2022-2183 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent [fedora-all]

BZ#2102173 CVE-2022-2231 vim: null pointer derefernce in function skipwhite may lead to DoS

BZ#2102174 CVE-2022-2231 vim: null pointer derefernce in function skipwhite may lead to DoS [fedora-all]

BZ#2102177 CVE-2022-2210 vim: out-of-bound write in function ml_append_int

BZ#2102179 CVE-2022-2210 vim: out-of-bound write in function ml_append_int [fedora-all]

BZ#2102183 CVE-2022-2208 vim: null pointer dereference in function diff_check

BZ#2102184 CVE-2022-2208 vim: null pointer dereference in function diff_check [fedora-all]

BZ#2102185 CVE-2022-2207 vim: heap-based buffer overflow in function ins_bs

BZ#2102186 CVE-2022-2207 vim: heap-based buffer overflow in function ins_bs [fedora-all]

BZ#2102188 CVE-2022-2206 vim: out-of-bound read in function msg_outtrans_attr

BZ#2102189 CVE-2022-2206 vim: out-of-bound read in function msg_outtrans_attr [fedora-all]

vim-8.2.5172-1.fc36

Automated Test Results

passed