MGASA-2022-0023 - Updated vim packages fix security vulnerability

Publication date: 18 Jan 2022
URL: https://advisories.mageia.org/MGASA-2022-0023.html
Type: security
Affected Mageia releases: 8
CVE: CVE-2022-0128,
     CVE-2022-0156,
     CVE-2022-0158,
     CVE-2022-0213

vim is vulnerable to Out-of-bounds Read (CVE-2022-0128)
vim is vulnerable to Use After Free (CVE-2022-0156)
vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0158)
vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0213)

References:
- https://bugs.mageia.org/show_bug.cgi?id=29891
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0128
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0156
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0158
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0213

SRPMS:
- 8/core/vim-8.2.4114-1.mga8