Summary: | <app-editors/{vim,gvim,vim-core}-8.2.3669: multiple vulnerabilities (CVE-2021-{3968,3973,3974}) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Sam James <sam> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | minor | CC: | allenwebb, vim |
Priority: | Normal | Keywords: | PullRequest |
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
See Also: | https://github.com/gentoo/gentoo/pull/23212 | ||
Whiteboard: | B3 [glsa+] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 828583 | ||
Bug Blocks: |
Description
Sam James
2021-11-19 13:53:20 UTC
CVE-2021-3984 (https://github.com/vim/vim/commit/2de9b7c7c8791da8853a9a7ca9c467867465b655): vim is vulnerable to Heap-based Buffer Overflow CVE-2021-4019 (https://github.com/vim/vim/commit/bd228fd097b41a798f90944b5d1245eddd484142): vim is vulnerable to Heap-based Buffer Overflow Need bump to >=8.2.3669 The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=520d2400781dbb0bbef1fafd8bed7ab2d5013175 commit 520d2400781dbb0bbef1fafd8bed7ab2d5013175 Author: Ke Wu <mikewu@google.com> AuthorDate: 2021-12-07 19:21:48 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2021-12-08 06:20:44 +0000 app-editors/gvim: version bump to v8.2.3669. This fixes CVE-2021-3968, CVE-2021-3973, CVE-2021-3974, CVE-2021-3984 and CVE-2021-4019. Bug: https://bugs.gentoo.org/824930 Signed-off-by: Ke Wu <mikewu@google.com> Closes: https://github.com/gentoo/gentoo/pull/23212 Signed-off-by: Sam James <sam@gentoo.org> app-editors/gvim/Manifest | 1 + app-editors/gvim/gvim-8.2.3669.ebuild | 383 ++++++++++++++++++++++++++++++++++ 2 files changed, 384 insertions(+) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=952ead41b609e6ab010b6d8edae9724b63034595 commit 952ead41b609e6ab010b6d8edae9724b63034595 Author: Ke Wu <mikewu@google.com> AuthorDate: 2021-12-07 19:18:15 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2021-12-08 06:20:43 +0000 app-editors/vim-core: version bump to v8.2.3669. This fixes CVE-2021-3968, CVE-2021-3973, CVE-2021-3974, CVE-2021-3984 and CVE-2021-4019. Bug: https://bugs.gentoo.org/824930 Signed-off-by: Ke Wu <mikewu@google.com> Signed-off-by: Sam James <sam@gentoo.org> app-editors/vim-core/Manifest | 1 + app-editors/vim-core/vim-core-8.2.3669.ebuild | 233 ++++++++++++++++++++++++++ 2 files changed, 234 insertions(+) https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=be6f91c94f38123523623a6d98a67b13377dc07d commit be6f91c94f38123523623a6d98a67b13377dc07d Author: Ke Wu <mikewu@google.com> AuthorDate: 2021-12-07 19:13:56 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2021-12-08 06:20:42 +0000 app-editors/vim: version bump to v8.2.3669. This fixes CVE-2021-3968, CVE-2021-3973, CVE-2021-3974, CVE-2021-3984 and CVE-2021-4019. Bug: https://bugs.gentoo.org/824930 Signed-off-by: Ke Wu <mikewu@google.com> Signed-off-by: Sam James <sam@gentoo.org> app-editors/vim/Manifest | 1 + app-editors/vim/vim-8.2.3669.ebuild | 355 ++++++++++++++++++++++++++++++++++++ 2 files changed, 356 insertions(+) GLSA request filed The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/data/glsa.git/commit/?id=2cee523fe648754bae0e4ed2a531da672ac5fa15 commit 2cee523fe648754bae0e4ed2a531da672ac5fa15 Author: GLSAMaker <glsamaker@gentoo.org> AuthorDate: 2022-08-21 01:33:31 +0000 Commit: John Helmert III <ajak@gentoo.org> CommitDate: 2022-08-21 01:40:46 +0000 [ GLSA 202208-32 ] Vim, gVim: Multiple Vulnerabilities Bug: https://bugs.gentoo.org/811870 Bug: https://bugs.gentoo.org/818562 Bug: https://bugs.gentoo.org/819528 Bug: https://bugs.gentoo.org/823473 Bug: https://bugs.gentoo.org/824930 Bug: https://bugs.gentoo.org/828583 Bug: https://bugs.gentoo.org/829658 Bug: https://bugs.gentoo.org/830106 Bug: https://bugs.gentoo.org/830994 Bug: https://bugs.gentoo.org/833572 Bug: https://bugs.gentoo.org/836432 Bug: https://bugs.gentoo.org/851231 Signed-off-by: GLSAMaker <glsamaker@gentoo.org> Signed-off-by: John Helmert III <ajak@gentoo.org> glsa-202208-32.xml | 168 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 168 insertions(+) GLSA released, all done! |