[CLSA-2022:1654529495] Fixed CVEs in vim: CVE-2022-1785, CVE-2022-1796
Type:
security
Severity:
Important
Release date:
2022-06-06
Description:
- CVE-2022-1785: fix out-of-bounds write by disallowing changing window in substitute expression - CVE-2022-1796: fix use after free by making a copy of a line
Updated packages:
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:963de8c94c628b580cda628fbabe5a39bfe82bce
  • vim-X11-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:0e633d4974d06c9c5a759d8c45b47665658120e7
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:9617017ff5a62d1a81ffe3910ae5fb40769675e7
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:665314c2e2a9aaf83a27c619c0d4b817d76399ba
  • vim-common-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:e8cb479450e667022a818ece72cbb3c071d7a102
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.