FEDORA-2022-b06fbea2c7 — security update for vim

stable

vim-9.0.049-1.fc36

FEDORA-2022-b06fbea2c7 created by zdohnal 6 months ago for Fedora 36

The newest upstream commit

Security fixes for CVE-2022-2257, CVE-2022-2284, CVE-2022-2285, CVE-2022-2286, CVE-2022-2287, CVE-2022-2288, CVE-2022-2289, CVE-2022-2264, CVE-2022-2304.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2022-b06fbea2c7

This update has been submitted for testing by zdohnal.

6 months ago

This update's test gating status has been changed to 'waiting'.

6 months ago

zdohnal edited this update.

6 months ago

This update's test gating status has been changed to 'failed'.

6 months ago

This update has been pushed to testing.

6 months ago

bojan provided feedback 6 months ago

karma

andilinux commented & provided feedback 6 months ago

karma

works

This update's test gating status has been changed to 'passed'.

6 months ago

This update can be pushed to stable now if the maintainer wishes

6 months ago

frantisekz commented & provided feedback 6 months ago

karma

Works well

This update has been submitted for stable by bodhi.

6 months ago

ibims provided feedback 6 months ago

karma

This update has been pushed to stable.

6 months ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

vim-9.0.049-1.fc36

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

6 months ago

in testing

6 months ago

in stable

6 months ago

modified

6 months ago

BZ#2103133 CVE-2022-2257 vim: an out-of-bound read in function msg_outtrans_special

BZ#2103134 CVE-2022-2257 vim: an out-of-bound read in function msg_outtrans_special [fedora-all]

BZ#2103872 CVE-2022-2284 vim: out of bounds read in utfc_ptr2len() at mbyte.c

BZ#2103874 CVE-2022-2285 vim: integer overflow in del_typebuf() at getchar.c

BZ#2103875 CVE-2022-2286 vim: out of bounds read in ins_bytes() at change.c

BZ#2103876 CVE-2022-2287 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

BZ#2103878 CVE-2022-2288 vim: out of bounds write in parse_command_modifiers() at ex_docmd.c

BZ#2103880 CVE-2022-2289 vim: use after free in ex_diffgetput() at diff.c

BZ#2103881 CVE-2022-2284 vim: out of bounds read in utfc_ptr2len() at mbyte.c [fedora-all]

BZ#2103882 CVE-2022-2285 vim: integer overflow in del_typebuf() at getchar.c [fedora-all]

BZ#2103883 CVE-2022-2288 vim: out of bounds write in parse_command_modifiers() at ex_docmd.c [fedora-all]

BZ#2103884 CVE-2022-2286 vim: out of bounds read in ins_bytes() at change.c [fedora-all]

BZ#2103885 CVE-2022-2287 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c [fedora-all]

BZ#2103886 CVE-2022-2289 vim: use after free in ex_diffgetput() at diff.c [fedora-all]

BZ#2103951 CVE-2022-2264 vim: out of bounds read in inc() at misc2.c

BZ#2103952 CVE-2022-2264 vim: out of bounds read in inc() at misc2.c [fedora-all]

BZ#2104416 CVE-2022-2304 vim: stack buffer overflow in spell_dump_compl() at spell.c

BZ#2104417 CVE-2022-2304 vim: stack buffer overflow in spell_dump_compl() at spell.c [fedora-all]

vim-9.0.049-1.fc36

Automated Test Results

passed