Mageia 2022-0023: vim security update
Summary
vim is vulnerable to Out-of-bounds Read (CVE-2022-0128)
vim is vulnerable to Use After Free (CVE-2022-0156)
vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0158)
vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0213)
References
- https://bugs.mageia.org/show_bug.cgi?id=29891
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0128
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0156
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0158
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0213
Resolution
MGASA-2022-0023 - Updated vim packages fix security vulnerability
SRPMS
- 8/core/vim-8.2.4114-1.mga8