Medium ELSA-2022-1552 1 CVE

Moderate: vim security update (Oracle Linux 8)

Published Apr 30, 2022 · Updated Apr 30, 2022

Ecosystem: Oracle Linux

Summary

[8.0.1763-16.0.1]
- - Remove upstream references [Orabug: 31197557]

[2:8.0.1763-16.13]
- CVE-2022-1154 vim: use after free in utf_ptr2char

Fixed packages 5

Release	Package	Fixed in
Oracle Linux · 8	vim-common	2:8.0.1763-16.0.1.el8_5.13
Oracle Linux · 8	vim-enhanced	2:8.0.1763-16.0.1.el8_5.13
Oracle Linux · 8	vim-filesystem	2:8.0.1763-16.0.1.el8_5.13
Oracle Linux · 8	vim-minimal	2:8.0.1763-16.0.1.el8_5.13
Oracle Linux · 8	vim-X11	2:8.0.1763-16.0.1.el8_5.13

Vulnerabilities 1

High 7.8

CVE-2022-1154

Use after free in utf_ptr2char in vim/vim

Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Mar 30, 2022