FEDORA-2022-b5de00c0f2 — security update for vim

obsolete

vim-8.2.4006-1.fc34

FEDORA-2022-b5de00c0f2 created by zdohnal 3 years ago for Fedora 34

Security fix for CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4186, CVE-2021-4192, CVE-2021-4193

This update has been submitted for testing by zdohnal.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'failed'.

3 years ago

This update has been pushed to testing.

3 years ago

This update's test gating status has been changed to 'passed'.

3 years ago

zdohnal edited this update.

3 years ago

This update has been obsoleted by vim-8.2.4068-1.fc34.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

3 years ago

in testing

3 years ago

modified

3 years ago

Builds

vim-8.2.4006-1.fc34

BZ#2034720 CVE-2021-4136 vim: heap-based buffer overflow in eval_lambda() in src/eval.c

BZ#2034721 CVE-2021-4136 vim: heap-based buffer overflow in eval_lambda() in src/eval.c [fedora-all]

BZ#2035928 CVE-2021-4166 vim: out-of-bounds read in do_arg_all() in src/arglist.c

BZ#2035929 CVE-2021-4166 vim: out-of-bounds read in do_arg_all() in src/arglist.c [fedora-all]

BZ#2035930 CVE-2021-4173 vim: use-after-free with nested :def function

BZ#2035931 CVE-2021-4173 vim: use-after-free with nested :def function [fedora-all]

BZ#2036129 CVE-2021-4187 vim: use-after-free vulnerability

BZ#2036130 CVE-2021-4187 vim: use-after-free vulnerability [fedora-all]

vim-8.2.4006-1.fc34

Automated Test Results

passed