[CLSA-2022:1654525460] Fixed CVEs in vim: CVE-2022-1785, CVE-2022-1796
Type:
security
Severity:
Important
Release date:
2022-06-06
Description:
- CVE-2022-1785: fix out-of-bounds write by disallowing changing window in substitute expression - CVE-2022-1796: fix use after free by making a copy of a line
Updated packages:
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:5beec830d3ae7287d41f29102c76bee164a66ddd
  • vim-X11-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:88f7374d8e5bd5fe95ffe29f9e0fedb1448c4d37
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:7800b513905b2970aacb47e7442bbf70bc08e773
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:29b218f3e9184fa240c3e679946b00b2bc3b7620
  • vim-common-7.4.629-5.2.el6.tuxcare.els14.x86_64.rpm
    sha:953719bb418dc9fe9e7f1a0f4f60556292624408
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.