Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Fedora 37: FEDORA-2022-1e14f3ae45 Critical: vim Key Code Issue

fedora
Calendar Grey December 7, 2022
Dist Fedora Esm H88
Fedora Security Alert for vim addresses vulnerability CVE-2022-4141 related to key code interpretation.
The newest upstream commit Security fix for CVE-2022-4141 Vim did not recognize key codes passed by Kitty

Summary

VIM (VIsual editor iMproved) is an updated and improved version of the

vi editor. Vi was the first real screen-based editor for UNIX, and is

still very popular. VIM improves on vi by adding new features:

multiple windows, multi-level undo, block highlighting and more.

The newest upstream commit Security fix for CVE-2022-4141 Vim did not

recognize key codes passed by Kitty

* Mon Dec 5 2022 Zdenek Dohnal - 2:9.0.1006-1

- patchlevel 1006

[ 1 ] Bug #2148991 - CVE-2022-4141 vim: invalid memory access in substitute with function

https://bugzilla.redhat.com/show_bug.cgi?id=2148991

su -c 'dnf upgrade --advisory FEDORA-2022-1e14f3ae45' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 37
Version: 9.0.1006
Release: 1.fc37
Summary: The VIM editor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here