FEDORA-2022-9d7a58e376 — security update for vim

stable

vim-9.0.049-1.fc35

FEDORA-2022-9d7a58e376 created by zdohnal 2 years ago for Fedora 35

Security fixes for CVE-2022-2257, CVE-2022-2284, CVE-2022-2285, CVE-2022-2286, CVE-2022-2287, CVE-2022-2288, CVE-2022-2289, CVE-2022-2264, CVE-2022-2304, CVE-2022-2345, CVE-2022-2344, CVE-2022-2343.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-9d7a58e376

This update has been submitted for testing by zdohnal.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

zdohnal edited this update.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

boycottsystemd1 provided feedback 2 years ago

karma

nixuser commented & provided feedback 2 years ago

karma

This is working in a VM.

This update can be pushed to stable now if the maintainer wishes

2 years ago

zdohnal edited this update.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

This update has been submitted for stable by zdohnal.

2 years ago

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

Builds

vim-9.0.049-1.fc35

BZ#2103133 CVE-2022-2257 vim: an out-of-bound read in function msg_outtrans_special

BZ#2103134 CVE-2022-2257 vim: an out-of-bound read in function msg_outtrans_special [fedora-all]

BZ#2103872 CVE-2022-2284 vim: out of bounds read in utfc_ptr2len() at mbyte.c

BZ#2103874 CVE-2022-2285 vim: integer overflow in del_typebuf() at getchar.c

BZ#2103875 CVE-2022-2286 vim: out of bounds read in ins_bytes() at change.c

BZ#2103876 CVE-2022-2287 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

BZ#2103878 CVE-2022-2288 vim: out of bounds write in parse_command_modifiers() at ex_docmd.c

BZ#2103880 CVE-2022-2289 vim: use after free in ex_diffgetput() at diff.c

BZ#2103881 CVE-2022-2284 vim: out of bounds read in utfc_ptr2len() at mbyte.c [fedora-all]

BZ#2103882 CVE-2022-2285 vim: integer overflow in del_typebuf() at getchar.c [fedora-all]

BZ#2103883 CVE-2022-2288 vim: out of bounds write in parse_command_modifiers() at ex_docmd.c [fedora-all]

BZ#2103884 CVE-2022-2286 vim: out of bounds read in ins_bytes() at change.c [fedora-all]

BZ#2103885 CVE-2022-2287 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c [fedora-all]

BZ#2103886 CVE-2022-2289 vim: use after free in ex_diffgetput() at diff.c [fedora-all]

BZ#2103951 CVE-2022-2264 vim: out of bounds read in inc() at misc2.c

BZ#2103952 CVE-2022-2264 vim: out of bounds read in inc() at misc2.c [fedora-all]

BZ#2104416 CVE-2022-2304 vim: stack buffer overflow in spell_dump_compl() at spell.c

BZ#2104417 CVE-2022-2304 vim: stack buffer overflow in spell_dump_compl() at spell.c [fedora-all]

BZ#2106775 CVE-2022-2345 vim: use-after-free in skipwhite() in charset.c

BZ#2106779 CVE-2022-2343 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

BZ#2106787 CVE-2022-2344 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

vim-9.0.049-1.fc35

Automated Test Results

passed