RHBA-2022:3945MediumCVSS 7.3
Red Hat Bug Fix Advisory: new packages: vim
🔗 CVE IDs covered (1)
📋 Description
CVE-2022-0413 — vim: Use after free in src/ex_cmds.c
🎯 Affected products68
- Red Hat Enterprise Linux AppStream (v. 9)
- Red Hat Enterprise Linux BaseOS (v. 9)
- vim-2:8.2.2637-15.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-X11-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-2:8.2.2637-15.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-2:8.2.2637-15.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-2:8.2.2637-15.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-X11-debuginfo-2:8.2.2637-15.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-common-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-2:8.2.2637-15.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-2:8.2.2637-15.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-2:8.2.2637-15.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-common-debuginfo-2:8.2.2637-15.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-debuginfo-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)
- vim-debuginfo-2:8.2.2637-15.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)
- vim-debuginfo-2:8.2.2637-15.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)
- +38 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Untrusted vim scripts with -s [scriptin] are not recommended to run.
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHBA-2022:3945
- externalhttps://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.0_release_notes/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2011412
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2011424
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2011429
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2011749
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2015517
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2022/rhba-2022_3945.json