FEDORA-2023-030318ca00 — security update for vim

testing

vim-9.0.1407-1.fc36

FEDORA-2023-030318ca00 created by zdohnal a week ago for Fedora 36

Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264, CVE-2023-0512, CVE-2023-1355

The newest upstream patchlevel 1367

Security fix for CVE-2023-1127

How to install

sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-030318ca00

This update has been submitted for testing by zdohnal.

a week ago

This update's test gating status has been changed to 'waiting'.

a week ago

This update has obsoleted vim-9.0.1367-1.fc36, and has inherited its bugs and notes.

a week ago

This update's test gating status has been changed to 'failed'.

a week ago

This update has been pushed to testing.

6 days ago

This update's test gating status has been changed to 'passed'.

6 days ago

zdohnal edited this update.

4 days ago

boycottsystemd1 provided feedback 2 days ago

karma

Please login to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

vim-9.0.1407-1.fc36

Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

14 days

Dates

submitted

a week ago

in testing

6 days ago

days to stable

modified

4 days ago

BZ#2165798 CVE-2023-0512 vim: divide by zero in adjust_skipcol() at move.ca

BZ#2174662 CVE-2023-1127 vim: Divide By Zero in vim/vim

BZ#2174930 CVE-2023-1127 vim: Divide By Zero in vim/vim [fedora-all]

BZ#2176413 CVE-2023-1264 vim: NULL pointer dereference issue in utfc_ptr2len

BZ#2176457 CVE-2023-1175 vim: Incorrect Calculation of Buffer Size

BZ#2176458 CVE-2023-1175 vim: Incorrect Calculation of Buffer Size [fedora-all]

BZ#2176462 CVE-2023-1170 vim: Heap-based Buffer Overflow

BZ#2176463 CVE-2023-1170 vim: Heap-based Buffer Overflow [fedora-all]

BZ#2177970 CVE-2023-1264 vim: NULL pointer dereference issue in utfc_ptr2len [fedora-all]

BZ#2179801 CVE-2023-0512 vim: divide by zero in adjust_skipcol() at move.ca [fedora-all]

BZ#2179911 CVE-2023-1355 vim: null pointer dereference in class_object_index at vim9class.c

BZ#2179912 CVE-2023-1355 vim: null pointer dereference in class_object_index at vim9class [fedora-all]

vim-9.0.1407-1.fc36

Automated Test Results

passed