FEDORA-2022-b9edf60581 — security update for vim

stable

vim-9.0.412-1.fc37

FEDORA-2022-b9edf60581 created by zdohnal 2 years ago for Fedora 37

Security fix for CVE-2022-3099, CVE-2022-3016, CVE-2022-2980, CVE-2022-2982

Security fixes for CVE-2022-2849, CVE-2022-2862, CVE-2022-3037, CVE-2022-2845

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-b9edf60581

This update has been submitted for testing by zdohnal.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update has obsoleted vim-9.0.348-1.fc37, and has inherited its bugs and notes.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

nixuser commented & provided feedback 2 years ago

karma

Seems to be generally functional but unable to comment on the array of BZ.

This update can be pushed to stable now if the maintainer wishes

2 years ago

zdohnal edited this update.

2 years ago

frantisekz commented & provided feedback 2 years ago

karma

Generally works well

pwalter commented & provided feedback 2 years ago

karma

Works

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

Builds

vim-9.0.412-1.fc37

BZ#2119844 CVE-2022-2845 vim: Buffer Under-read

BZ#2122137 CVE-2022-2849 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c

BZ#2122138 CVE-2022-2849 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c [fedora-all]

BZ#2122139 CVE-2022-2862 vim: heap use-after-free in generate_PCALL() at src/vim9instr.c

BZ#2122140 CVE-2022-2862 vim: heap use-after-free in generate_PCALL() at src/vim9instr.c [fedora-all]

BZ#2122907 CVE-2022-3037 vim: use after free in function qf_buf_add_line( )

BZ#2122908 CVE-2022-3037 vim: use after free in function qf_buf_add_line( ) [fedora-all]

BZ#2123154 CVE-2022-2845 vim: Buffer Under-read [fedora-all]

BZ#2123709 CVE-2022-2980 vim: null pointer dereference in do_mouse() at src/mouse.c

BZ#2123710 CVE-2022-2980 vim: null pointer dereference in do_mouse() at src/mouse.c [fedora-all]

BZ#2123714 CVE-2022-2982 vim: use after free in qf_fill_buffer() at src/quickfix.c

BZ#2123715 CVE-2022-2982 vim: use after free in qf_fill_buffer() at src/quickfix.c [fedora-all]

BZ#2124157 CVE-2022-3099 vim: Use After Free in do_cmdline() in ex_docmd.c

BZ#2124158 CVE-2022-3099 vim: Use After Free in do_cmdline() in ex_docmd.c [fedora-all]

BZ#2124208 CVE-2022-3016 vim: use-after-free in get_next_valid_entry() at src/quickfix.c

BZ#2124209 CVE-2022-3016 vim: use-after-free in get_next_valid_entry() at src/quickfix.c [fedora-all]

vim-9.0.412-1.fc37

Automated Test Results

passed