Advisories » MGASA-2022-0023

Updated vim packages fix security vulnerability

Publication date: 18 Jan 2022
Modification date: 18 Jan 2022
Type: security
Affected Mageia releases : 8
CVE: CVE-2022-0128 , CVE-2022-0156 , CVE-2022-0158 , CVE-2022-0213

Description

vim is vulnerable to Out-of-bounds Read (CVE-2022-0128)
vim is vulnerable to Use After Free (CVE-2022-0156)
vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0158)
vim is vulnerable to Heap-based Buffer Overflow (CVE-2022-0213)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=29891
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/HD5S2FC2HF22A7XQXK2XXIR46EARVWIM/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0128
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0156
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0158
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0213

SRPMS

8/core

• vim-8.2.4114-1.mga8