Summary
Vim (Vi IMproved) is an updated and improved version of the vi editor.
Security Fix(es):
* vim: Out-of-bounds Write (CVE-2022-1785)
* vim: out-of-bounds write in vim_regsub_both() in regexp.c (CVE-2022-1897)
* vim: buffer over-read in utf_ptr2char() in mbyte.c (CVE-2022-1927)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | vim-common | 2:8.2.2637-16.el9_0.3 |
| AlmaLinux · 9 | vim-enhanced | 2:8.2.2637-16.el9_0.3 |
| AlmaLinux · 9 | vim-filesystem | 2:8.2.2637-16.el9_0.3 |
| AlmaLinux · 9 | vim-minimal | 2:8.2.2637-16.el9_0.3 |
| AlmaLinux · 9 | vim-X11 | 2:8.2.2637-16.el9_0.3 |
Vulnerabilities 3
-
High 7.8
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
-
High 7.8
Buffer Over-read in vim/vim
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
-
High 7.3
Out-of-bounds Write in vim/vim
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.
References
-
report
https://access.redhat.com/security/cve/CVE-2022-1785
-
report
https://access.redhat.com/security/cve/CVE-2022-1897
-
report
https://access.redhat.com/security/cve/CVE-2022-1927
-
report
https://bugzilla.redhat.com/2088689
-
report
https://bugzilla.redhat.com/2091682
-
report
https://bugzilla.redhat.com/2091687
-
advisory
https://errata.almalinux.org/9/ALSA-2022-5942.html