ELSA-2021-4517 — Moderate: vim security update (Oracle Linux 8)

Summary

[8.0.1763-16.0.1]
- - Remove upstream references [Orabug: 31197557]

[2:8.0.1763-16]
- 2004974 - CVE-2021-3796 vim: use-after-free in nv_replace() in normal.c [rhel-8.5.0]
- 2004891 - CVE-2021-3778 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c [rhel-8.5.0]

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	vim-common	2:8.0.1763-16.0.1.el8
Oracle Linux · 8	vim-enhanced	2:8.0.1763-16.0.1.el8
Oracle Linux · 8	vim-filesystem	2:8.0.1763-16.0.1.el8
Oracle Linux · 8	vim-minimal	2:8.0.1763-16.0.1.el8
Oracle Linux · 8	vim-X11	2:8.0.1763-16.0.1.el8

Vulnerabilities 2

High 8.2

CVE-2021-3796

Use After Free in vim/vim

vim is vulnerable to Use After Free

vim vim/vim vim vim Debian Ubuntu Alpine

Sep 15, 2021
High 7.8

CVE-2021-3778

Heap-based Buffer Overflow in vim/vim

vim is vulnerable to Heap-based Buffer Overflow

vim vim/vim vim vim Debian Ubuntu Alpine

Sep 15, 2021

Moderate: vim security update (Oracle Linux 8)

Summary

Fixed packages 5

Vulnerabilities 2

Use After Free in vim/vim

Heap-based Buffer Overflow in vim/vim