[CLSA-2022:1645466182] Fixed CVEs in vim: CVE-2022-0413, CVE-2022-0408, CVE-2022-0443, CVE-2022-0417
Type:
security
Severity:
Important
Release date:
2022-02-21
Description:
- CVE-2022-0408: fix stack corruption when looking for spell suggestions - CVE-2022-0413: fix using freed memory when substitute with function call - CVE-2022-0417: fix illegal memory access caused by ':retab 0' - CVE-2022-0443: fix using freed memory with ':lopen' and ':bwipe'
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els8.x86_64.rpm
    sha:eb0c7908afa022edb20da9a89bbc0f3f56a67787
  • vim-common-7.4.629-5.2.el6.tuxcare.els8.x86_64.rpm
    sha:5dd1ac25418a8c37b8d0e06beb2be95cf995dd62
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els8.x86_64.rpm
    sha:1c24a28db10689ad3300501a4e441ffb044643ff
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els8.x86_64.rpm
    sha:ddfe9bd945af1be73da23ea28bb73637db163248
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els8.x86_64.rpm
    sha:779da1660d92a482c6f85d50ee68b0a343d5537a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.