Skip to content
OpenAdvisories
Medium ELSA-2023-0958 1 CVE

Moderate: vim security update (Oracle Linux 9)

Published Feb 28, 2023 · Updated Feb 28, 2023

Summary

[8.2.2637-20.0.1]
- Remove upstream references [Orabug: 31197557]

[2:8.2.2637-20]
- CVE-2022-47024 vim: no check if the return value of XChangeGC() is NULL

[2:8.2.2637-19]
- CVE-2022-1785 vim: Out-of-bounds Write
- CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
- CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c

[2:8.2.2637-18]
- CVE-2022-1621 vim: heap buffer overflow
- CVE-2022-1629 vim: buffer over-read

[2:8.2.2637-17]
- CVE-2022-1154 vim: use after free in utf_ptr2char
- CVE-2022-1420 vim: Out-of-range Pointer Offset

Fixed packages 5

ReleasePackageFixed in
Oracle Linux · 9 vim-common 2:8.2.2637-20.0.1.el9_1
Oracle Linux · 9 vim-enhanced 2:8.2.2637-20.0.1.el9_1
Oracle Linux · 9 vim-filesystem 2:8.2.2637-20.0.1.el9_1
Oracle Linux · 9 vim-minimal 2:8.2.2637-20.0.1.el9_1
Oracle Linux · 9 vim-X11 2:8.2.2637-20.0.1.el9_1

Vulnerabilities 1