Affected: AlmaLinux:8: vim-X11, AlmaLinux:8: vim-common, AlmaLinux:8: vim-enhanced, AlmaLinux:8: vim-filesystem, AlmaLinux:8: vim-minimal

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: Heap-based buffer overflow in block_insert() in src/ops.c (CVE-2022-0261)

* vim: Heap-based buffer overflow in utf_head_off() in mbyte.c (CVE-2022-0318)

* vim: Heap-based buffer overflow in init_ccline() in ex_getln.c (CVE-2022-0359)

* vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow (CVE-2022-0361)

* vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c (CVE-2022-0392)

* vim: Use after free in src/ex_cmds.c (CVE-2022-0413)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Withdrawn by the publisher.

Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.

Heap-based Buffer Overflow in Conda vim prior to 8.2.

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP2: vim, openEuler:20.03-LTS-SP3: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0261) Heap-based Buffer Overflow in vim/vim prior to 8.2.(CVE-2022-0318) Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.(CVE-2022-0351) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0359) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0361) Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.(CVE-2022-0368) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0392) Use After Free in GitHub repository vim/vim prior to 8.2.(CVE-2022-0413) Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.(CVE-2022-0408) Use After Free in Conda vim prior to 8.2.(CVE-2022-0443) Heap-based Buffer Overflow in Conda vim prior to 8.2.(CVE-2022-0417)

vim is vulnerable to Heap-based Buffer Overflow(CVE-2022-0213)

gvim-9.0.0453-2.1 on GA media

vim: Heap-based buffer overflow in block_insert() in src/ops.c vim: Heap-based buffer overflow in utf_head_off() in mbyte.c vim: Heap-based buffer overflow in init_ccline() in ex_getln.c vim: Illegal memory access when copying lines in visual mode leads to heap buffer overflow vim: Heap-based buffer overflow in getexmodeline() in ex_getln.c vim: Use after free in src/ex_cmds.c

Security update for vim

Affected: Ubuntu:18.04:LTS: vim, Ubuntu:20.04:LTS: vim, Ubuntu:22.04:LTS: vim

Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.

Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. vim Exists in an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Vim is an editor based on the UNIX platform. Summary:

The Migration Toolkit for Containers (MTC) 1.5.4 is now available. Description:

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the MTC web console or the Kubernetes API.

Security Fix(es):

* golang: net/http/httputil: panic due to racy read of persistConn after handler panic (CVE-2021-36221)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Solution:

For details on how to install and use MTC, refer to:

https://docs.openshift.com/container-platform/latest/migration_toolkit_for_containers/installing-mtc.html

4. Bugs fixed (https://bugzilla.redhat.com/):

1995656 - CVE-2021-36221 golang: net/http/httputil: panic due to racy read of persistConn after handler panic

5. Description:

Red Hat Openshift GitOps is a declarative way to implement continuous deployment for cloud native applications. Bugs fixed (https://bugzilla.redhat.com/):

2062751 - CVE-2022-24730 argocd: path traversal and improper access control allows lea…

Ein lokaler Angreifer kann mehrere Schwachstellen in vim ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen, Speicher zu manipulieren oder Code zur Ausführung zu bringen.