Skip to content
OpenAdvisories
Medium ELSA-2022-0366 5 CVEs

Moderate: vim security update (Oracle Linux 8)

Published Feb 3, 2022 · Updated Feb 3, 2022

Summary

[8.0.1763-16.0.1.4]
- - Remove upstream references [Orabug: 31197557]

[2:8.0.1763-16.4]
- CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
- CVE-2021-4192 vim: vulnerable to Use After Free

[2:8.0.1763-16.3]
- 2028341 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-8.6.0]
- 2028430 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-8.6.0]

[2:8.0.1763-16.2]
- remove the upstream test - uses a feature which is not presented in RHEL 8

[2:8.0.1763-16.1]
- CVE-2021-3872 vim: heap-based buffer overflow in win_redr_status() drawscreen.c [rhel-8.6.0]

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 8 vim-common 2:8.0.1763-16.0.1.el8_5.4
Oracle Linux · 8 vim-enhanced 2:8.0.1763-16.0.1.el8_5.4
Oracle Linux · 8 vim-filesystem 2:8.0.1763-16.0.1.el8_5.4
Oracle Linux · 8 vim-minimal 2:8.0.1763-16.0.1.el8_5.4
Oracle Linux · 8 vim-X11 2:8.0.1763-16.0.1.el8_5.4

Vulnerabilities 5