FEDORA-2022-839fd408a5 — security update for vim

obsolete

vim-9.0.803-1.fc37

FEDORA-2022-839fd408a5 created by zdohnal 3 years ago for Fedora 37

patchlevel 803

The newest upstream commit

Security fixes for CVE-2022-3256, CVE-2022-3324, CVE-2022-3352, CVE-2022-3235, CVE-2022-3234, CVE-2022-3296, CVE-2022-3297, CVE-2022-3278.

This update has been submitted for testing by zdohnal.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update has obsoleted vim-9.0.720-1.fc37, and has inherited its bugs and notes.

3 years ago

This update's test gating status has been changed to 'failed'.

3 years ago

This update has been pushed to testing.

3 years ago

This update's test gating status has been changed to 'passed'.

3 years ago

nixuser commented & provided feedback 3 years ago

karma

Working OK here.

frantisekz commented & provided feedback 3 years ago

karma

Works well

This update can be pushed to stable now if the maintainer wishes

3 years ago

bojan commented & provided feedback 3 years ago

karma

Works.

This update has been submitted for stable by bodhi.

3 years ago

nb provided feedback 3 years ago

karma

This update has been obsoleted by vim-9.0.828-1.fc37.

3 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

3 years ago

in testing

3 years ago

Builds

vim-9.0.803-1.fc37

BZ#2129370 CVE-2022-3234 vim: Heap-based Buffer Overflow

BZ#2129371 CVE-2022-3235 vim: Use After Free

BZ#2129831 CVE-2022-3278 vim: null pointer dereference in eval_next_non_blank() in eval.c

BZ#2129833 CVE-2022-3278 vim: null pointer dereference in eval_next_non_blank() in eval.c [fedora-all]

BZ#2129835 CVE-2022-3296 vim: stack buffer overflow in ex_finally() in ex_eval.c

BZ#2129836 CVE-2022-3296 vim: stack buffer overflow in ex_finally() in ex_eval.c [fedora-all]

BZ#2129838 CVE-2022-3297 vim: use-after-free in process_next_cpt_value() at insexpand.c

BZ#2129839 CVE-2022-3297 vim: use-after-free in process_next_cpt_value() at insexpand.c [fedora-all]

BZ#2130582 CVE-2022-3234 vim: Heap-based Buffer Overflow [fedora-all]

BZ#2130583 CVE-2022-3235 vim: Use After Free [fedora-all]

BZ#2131087 CVE-2022-3352 vim: use after free

BZ#2131306 CVE-2022-3352 vim: use after free [fedora-all]

BZ#2132558 CVE-2022-3324 vim: stack buffer overflow in win_redr_ruler() at drawscreen.c

BZ#2132559 CVE-2022-3324 vim: stack buffer overflow in win_redr_ruler() at drawscreen.c [fedora-all]

BZ#2132571 CVE-2022-3256 vim: use-after-free in movemark() at mark.c

BZ#2132572 CVE-2022-3256 vim: use-after-free in movemark() at mark.c [fedora-all]

vim-9.0.803-1.fc37

Automated Test Results

passed