Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Fedora 37: FEDORA-2023-0f6a9433cf Critical: Vim Out-Of-Bounds Read

fedora
Calendar Grey January 11, 2023
Dist Fedora Esm H88
Upgraded Emacs for Fedora 37 to address severe buffer overflow vulnerabilities and boost text editor safety.
Security fix for CVE-2023-0049

Summary

VIM (VIsual editor iMproved) is an updated and improved version of the

vi editor. Vi was the first real screen-based editor for UNIX, and is

still very popular. VIM improves on vi by adding new features:

multiple windows, multi-level undo, block highlighting and more.

Security fix for CVE-2023-0049

* Mon Jan 9 2023 Zdenek Dohnal - 2:9.0.1160-1

- patchlevel 1160

* Mon Jan 9 2023 Zdenek Dohnal - 2:9.0.1054-2

- FTBFS with new FORTIFY_SOURCE=3 - remove it since Vim wants level 1

[ 1 ] Bug #2158269 - CVE-2023-0049 vim: out-of-bounds read in function build_stl_str_hl

https://bugzilla.redhat.com/show_bug.cgi?id=2158269

su -c 'dnf upgrade --advisory FEDORA-2023-0f6a9433cf' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 37
Version: 9.0.1160
Release: 1.fc37
Summary: The VIM editor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here