Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Oracle Linux 8 ELSA-2022-0469 Moderate: Addressing Vim Memory Safety Issue

oracle
Calendar Grey February 3, 2022
Oracle Linux Logo Esm H88
Oracle Linux 8 has been issued a Moderate Security Update for git to fix several security flaws. Further information can be found here.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

[8.0.1763-16.0.1.4] - - Remove upstream references [Orabug: 31197557] [2:8.0.1763-16.4] - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read - CVE-2021-4192 vim: vulnerable to Use After Free [2:8.0.1763-16.3] - 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0] - 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0] [2:8.0.1763-16.2] - remove the upstream test - uses a feature which is not presented in RHEL 8 [2:8.0.1763-16.1] - CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-8.6.0]

Topics%20covered

Topics Covered

security advisory moderate buffer overflow software update vim Oracle Linux

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates/vim-8.0.1763-16.0.1.el8_5.4.src.rpm

x86_64

vim-X11-8.0.1763-16.0.1.el8_5.4.x86_64.rpm vim-common-8.0.1763-16.0.1.el8_5.4.x86_64.rpm vim-enhanced-8.0.1763-16.0.1.el8_5.4.x86_64.rpm vim-filesystem-8.0.1763-16.0.1.el8_5.4.noarch.rpm vim-minimal-8.0.1763-16.0.1.el8_5.4.x86_64.rpm

aarch64

vim-X11-8.0.1763-16.0.1.el8_5.4.aarch64.rpm vim-common-8.0.1763-16.0.1.el8_5.4.aarch64.rpm vim-enhanced-8.0.1763-16.0.1.el8_5.4.aarch64.rpm vim-filesystem-8.0.1763-16.0.1.el8_5.4.noarch.rpm vim-minimal-8.0.1763-16.0.1.el8_5.4.aarch64.rpm

Related CVEs: CVE-2021-3872 CVE-2021-3984 CVE-2021-4019 CVE-2021-4192 CVE-2021-4193

Topics%20covered

Topics Covered

security advisory moderate buffer overflow software update vim Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here