[CLSA-2022:1658853897] Fixed CVEs in vim: CVE-2022-2289, CVE-2022-2304
Type:
security
Severity:
Important
Release date:
2022-07-26
Description:
- CVE-2022-2289: bail out when diff pointer is no longer valid to avoid accessing freed memory with diff put - CVE-2022-2304: limit the word length to avoid out of bound accesing
Updated packages:
  • vim-common-7.4.629-5.2.el6.tuxcare.els23.x86_64.rpm
    sha:eee5b2639570b2add77b5318bd1af7a27132f48f
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els23.x86_64.rpm
    sha:c97d1b5837ede7311736d7b7d25c2b318a63e68d
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els23.x86_64.rpm
    sha:65113a37d117385926d018b4a6e3a30455be9e53
  • vim-X11-7.4.629-5.2.el6.tuxcare.els23.x86_64.rpm
    sha:14d6b3079d30e8208f07199484cea008d315dd9a
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els23.x86_64.rpm
    sha:11be2edb61964057f3ca1c36fb417d6902fc25f6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.