Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 8: MGASA-2022-0015 moderate: vim Buffer Overflow and More

mageia
Calendar Grey January 15, 2022
Dist Mageia Esm H88
Mageia 2023-0020 launches revised emacs software that rectifies various security flaws, incorporating detailed CWE classifications.
CWE-122 Heap-based Buffer Overflow (CVE-2021-4136) CWE-125 Out-of-bounds Read (CVE-2021-4166) CWE-416 Use After Free (CVE-2021-4173) CWE-416 Use After Free (CVE-2021-4187)

Summary

CWE-122 Heap-based Buffer Overflow (CVE-2021-4136) CWE-125 Out-of-bounds Read (CVE-2021-4166) CWE-416 Use After Free (CVE-2021-4173) CWE-416 Use After Free (CVE-2021-4187)

References

- https://bugs.mageia.org/show_bug.cgi?id=29856

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2EY2VFBU3YGGWI5BW4XKT3F37MYGEQUD/

- https://www.cve.org/CVERecord?id=CVE-2021-4136

- https://www.cve.org/CVERecord?id=CVE-2021-4166

- https://www.cve.org/CVERecord?id=CVE-2021-4173

- https://www.cve.org/CVERecord?id=CVE-2021-4187

Resolution

SRPMS

- 8/core/vim-8.2.4006-1.mga8

Publication date: 15 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0015.html
Type: security
CVE: CVE-2021-4136, CVE-2021-4166, CVE-2021-4173, CVE-2021-4187

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here