FEDORA-2022-7e9e1ae1fb — security update for vim

stable

vim-8.2.4232-1.fc34

FEDORA-2022-7e9e1ae1fb created by zdohnal 2 years ago for Fedora 34

Security fixes for CVE-2022-0351, CVE-2022-0359

Security fixes for CVE-2022-0213, CVE-2022-0261, CVE-2022-0128, CVE-2022-0318

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-7e9e1ae1fb

This update has been submitted for testing by zdohnal.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update has obsoleted vim-8.2.4198-1.fc34, and has inherited its bugs and notes.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

geraldosimiao provided feedback 2 years ago

karma

bitter provided feedback 2 years ago

karma

This update's test gating status has been changed to 'passed'.

2 years ago

This update can be pushed to stable now if the maintainer wishes

2 years ago

This update has been submitted for stable by zdohnal.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

vim-8.2.4232-1.fc34

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#2043779 CVE-2022-0213 vim: vim is vulnerable to out of bounds read

BZ#2044142 CVE-2022-0213 vim: vim is vulnerable to out of bounds read [fedora-all]

BZ#2044607 CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c

BZ#2044608 CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c [fedora-all]

BZ#2044954 CVE-2022-0128 vim: a heap-based OOB read of size 1

BZ#2044956 CVE-2022-0128 vim: a heap-based OOB read of size 1 [fedora-all]

BZ#2045355 CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c

BZ#2045356 CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c [fedora-all]

BZ#2046436 CVE-2022-0351 vim: access of memory location before start of buffer

BZ#2046437 CVE-2022-0351 vim: access of memory location before start of buffer [fedora-all]

BZ#2046479 CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c

BZ#2046480 CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c [fedora-all]

vim-8.2.4232-1.fc34

Automated Test Results

passed