FEDORA-2023-030318ca00 — security update for vim

stable

vim-9.0.1407-1.fc36

FEDORA-2023-030318ca00 created by zdohnal 2 years ago for Fedora 36

Security fixes for CVE-2023-1175, CVE-2023-1170, CVE-2023-1264, CVE-2023-0512, CVE-2023-1355

The newest upstream patchlevel 1367

Security fix for CVE-2023-1127

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-030318ca00

This update has been submitted for testing by zdohnal.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update has obsoleted vim-9.0.1367-1.fc36, and has inherited its bugs and notes.

2 years ago

This update's test gating status has been changed to 'failed'.

2 years ago

This update has been pushed to testing.

2 years ago

This update's test gating status has been changed to 'passed'.

2 years ago

zdohnal edited this update.

2 years ago

boycottsystemd1 provided feedback 2 years ago

karma

This update has been submitted for stable by bodhi.

2 years ago

nixuser commented & provided feedback 2 years ago

karma

Vim is working for me on f36 in a VM.

This update has been pushed to stable.

2 years ago

Please log in to add feedback.

Metadata

Type

security

Severity

low

Karma

Signed

Content Type

RPM

Test Gating

passed

Autopush Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

14 days

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

modified

2 years ago

approved

2 years ago

Builds

vim-9.0.1407-1.fc36

BZ#2165798 CVE-2023-0512 vim: divide by zero in adjust_skipcol() at move.ca

BZ#2174662 CVE-2023-1127 vim: Divide By Zero in vim/vim

BZ#2174930 CVE-2023-1127 vim: Divide By Zero in vim/vim [fedora-all]

BZ#2176413 CVE-2023-1264 vim: NULL pointer dereference issue in utfc_ptr2len

BZ#2176457 CVE-2023-1175 vim: Incorrect Calculation of Buffer Size

BZ#2176458 CVE-2023-1175 vim: Incorrect Calculation of Buffer Size [fedora-all]

BZ#2176462 CVE-2023-1170 vim: Heap-based Buffer Overflow

BZ#2176463 CVE-2023-1170 vim: Heap-based Buffer Overflow [fedora-all]

BZ#2177970 CVE-2023-1264 vim: NULL pointer dereference issue in utfc_ptr2len [fedora-all]

BZ#2179801 CVE-2023-0512 vim: divide by zero in adjust_skipcol() at move.ca [fedora-all]

BZ#2179911 CVE-2023-1355 vim: null pointer dereference in class_object_index at vim9class.c

BZ#2179912 CVE-2023-1355 vim: null pointer dereference in class_object_index at vim9class [fedora-all]

vim-9.0.1407-1.fc36

Automated Test Results

passed