FEDORA-2022-fff548cfab — security update for vim

stable

vim-9.0.720-1.fc35

FEDORA-2022-fff548cfab created by zdohnal 8 months ago for Fedora 35

The newest upstream commit

Security fixes for CVE-2022-3256, CVE-2022-3324, CVE-2022-3352, CVE-2022-3235, CVE-2022-3234, CVE-2022-3296, CVE-2022-3297, CVE-2022-3278.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2022-fff548cfab

This update has been submitted for testing by zdohnal.

8 months ago

This update's test gating status has been changed to 'waiting'.

8 months ago

zdohnal edited this update.

8 months ago

This update's test gating status has been changed to 'failed'.

8 months ago

This update has been pushed to testing.

8 months ago

This update's test gating status has been changed to 'passed'.

8 months ago

boycottsystemd1 provided feedback 8 months ago

karma

demiobenour provided feedback 8 months ago

karma

This update can be pushed to stable now if the maintainer wishes

8 months ago

nixuser commented & provided feedback 8 months ago

karma

Working fine in a VM.

This update has been submitted for stable by bodhi.

8 months ago

This update has been pushed to stable.

8 months ago

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

vim-9.0.720-1.fc35

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

8 months ago

in testing

8 months ago

in stable

8 months ago

modified

8 months ago

BZ#2129370 CVE-2022-3234 vim: Heap-based Buffer Overflow

BZ#2129371 CVE-2022-3235 vim: Use After Free

BZ#2129831 CVE-2022-3278 vim: null pointer dereference in eval_next_non_blank() in eval.c

BZ#2129833 CVE-2022-3278 vim: null pointer dereference in eval_next_non_blank() in eval.c [fedora-all]

BZ#2129835 CVE-2022-3296 vim: stack buffer overflow in ex_finally() in ex_eval.c

BZ#2129836 CVE-2022-3296 vim: stack buffer overflow in ex_finally() in ex_eval.c [fedora-all]

BZ#2129838 CVE-2022-3297 vim: use-after-free in process_next_cpt_value() at insexpand.c

BZ#2129839 CVE-2022-3297 vim: use-after-free in process_next_cpt_value() at insexpand.c [fedora-all]

BZ#2130582 CVE-2022-3234 vim: Heap-based Buffer Overflow [fedora-all]

BZ#2130583 CVE-2022-3235 vim: Use After Free [fedora-all]

BZ#2131087 CVE-2022-3352 vim: use after free

BZ#2131306 CVE-2022-3352 vim: use after free [fedora-all]

BZ#2132558 CVE-2022-3324 vim: stack buffer overflow in win_redr_ruler() at drawscreen.c

BZ#2132559 CVE-2022-3324 vim: stack buffer overflow in win_redr_ruler() at drawscreen.c [fedora-all]

BZ#2132571 CVE-2022-3256 vim: use-after-free in movemark() at mark.c

BZ#2132572 CVE-2022-3256 vim: use-after-free in movemark() at mark.c [fedora-all]

vim-9.0.720-1.fc35

Automated Test Results

passed