SUSE-SU-2022:2102-1

Dashboard / Vulnerabilities / SUSE-SU-2022:2102-1

SUSE-SU-2022:2102-1

Summary: Security update for vim

Details: This update for vim fixes the following issues: - CVE-2017-17087: Fixed information leak via .swp files (bsc#1070955). - CVE-2021-3875: Fixed heap-based buffer overflow (bsc#1191770). - CVE-2021-3903: Fixed heap-based buffer overflow (bsc#1192167). - CVE-2021-3968: Fixed heap-based buffer overflow (bsc#1192902). - CVE-2021-3973: Fixed heap-based buffer overflow (bsc#1192903). - CVE-2021-3974: Fixed use-after-free (bsc#1192904). - CVE-2021-4069: Fixed use-after-free in ex_open()in src/ex_docmd.c (bsc#1193466). - CVE-2021-4136: Fixed heap-based buffer overflow (bsc#1193905). - CVE-2021-4166: Fixed out-of-bounds read (bsc#1194093). - CVE-2021-4192: Fixed use-after-free (bsc#1194217). - CVE-2021-4193: Fixed out-of-bounds read (bsc#1194216). - CVE-2022-0128: Fixed out-of-bounds read (bsc#1194388). - CVE-2022-0213: Fixed heap-based buffer overflow (bsc#1194885). - CVE-2022-0261: Fixed heap-based buffer overflow (bsc#1194872). - CVE-2022-0318: Fixed heap-based buffer overflow (bsc#1195004). - CVE-2022-0359: Fixed heap-based buffer overflow in init_ccline() in ex_getln.c (bsc#1195203). - CVE-2022-0392: Fixed heap-based buffer overflow (bsc#1195332). - CVE-2022-0407: Fixed heap-based buffer overflow (bsc#1195354). - CVE-2022-0696: Fixed NULL pointer dereference (bsc#1196361). - CVE-2022-1381: Fixed global heap buffer overflow in skip_range (bsc#1198596). - CVE-2022-1420: Fixed out-of-range pointer offset (bsc#1198748). - CVE-2022-1616: Fixed use-after-free in append_command (bsc#1199331). - CVE-2022-1619: Fixed heap-based Buffer Overflow in function cmdline_erase_chars (bsc#1199333). - CVE-2022-1620: Fixed NULL pointer dereference in function vim_regexec_string (bsc#1199334). - CVE-2022-1733: Fixed heap-based buffer overflow in cindent.c (bsc#1199655). - CVE-2022-1735: Fixed heap-based buffer overflow (bsc#1199651). - CVE-2022-1771: Fixed stack exhaustion (bsc#1199693). - CVE-2022-1785: Fixed out-of-bounds write (bsc#1199745). - CVE-2022-1796: Fixed use-after-free in find_pattern_in_path (bsc#1199747). - CVE-2022-1851: Fixed out-of-bounds read (bsc#1199936). - CVE-2022-1897: Fixed out-of-bounds write (bsc#1200010). - CVE-2022-1898: Fixed use-after-free (bsc#1200011). - CVE-2022-1927: Fixed buffer over-read (bsc#1200012).

References: https://www.suse.com/support/update/announcement/2022/suse-su-20222102-1/, https://bugzilla.suse.com/1070955, https://bugzilla.suse.com/1191770, https://bugzilla.suse.com/1192167, https://bugzilla.suse.com/1192902, https://bugzilla.suse.com/1192903, https://bugzilla.suse.com/1192904, https://bugzilla.suse.com/1193466, https://bugzilla.suse.com/1193905, https://bugzilla.suse.com/1194093, https://bugzilla.suse.com/1194216, https://bugzilla.suse.com/1194217, https://bugzilla.suse.com/1194388, https://bugzilla.suse.com/1194872, https://bugzilla.suse.com/1194885, https://bugzilla.suse.com/1195004, https://bugzilla.suse.com/1195203, https://bugzilla.suse.com/1195332, https://bugzilla.suse.com/1195354, https://bugzilla.suse.com/1196361, https://bugzilla.suse.com/1198596, https://bugzilla.suse.com/1198748, https://bugzilla.suse.com/1199331, https://bugzilla.suse.com/1199333, https://bugzilla.suse.com/1199334, https://bugzilla.suse.com/1199651, https://bugzilla.suse.com/1199655, https://bugzilla.suse.com/1199693, https://bugzilla.suse.com/1199745, https://bugzilla.suse.com/1199747, https://bugzilla.suse.com/1199936, https://bugzilla.suse.com/1200010, https://bugzilla.suse.com/1200011, https://bugzilla.suse.com/1200012, https://www.suse.com/security/cve/CVE-2017-17087, https://www.suse.com/security/cve/CVE-2021-3778, https://www.suse.com/security/cve/CVE-2021-3796, https://www.suse.com/security/cve/CVE-2021-3872, https://www.suse.com/security/cve/CVE-2021-3875, https://www.suse.com/security/cve/CVE-2021-3903, https://www.suse.com/security/cve/CVE-2021-3927, https://www.suse.com/security/cve/CVE-2021-3928, https://www.suse.com/security/cve/CVE-2021-3968, https://www.suse.com/security/cve/CVE-2021-3973, https://www.suse.com/security/cve/CVE-2021-3974, https://www.suse.com/security/cve/CVE-2021-3984, https://www.suse.com/security/cve/CVE-2021-4019, https://www.suse.com/security/cve/CVE-2021-4069, https://www.suse.com/security/cve/CVE-2021-4136, https://www.suse.com/security/cve/CVE-2021-4166, https://www.suse.com/security/cve/CVE-2021-4192, https://www.suse.com/security/cve/CVE-2021-4193, https://www.suse.com/security/cve/CVE-2021-46059, https://www.suse.com/security/cve/CVE-2022-0128, https://www.suse.com/security/cve/CVE-2022-0213, https://www.suse.com/security/cve/CVE-2022-0261, https://www.suse.com/security/cve/CVE-2022-0318, https://www.suse.com/security/cve/CVE-2022-0319, https://www.suse.com/security/cve/CVE-2022-0351, https://www.suse.com/security/cve/CVE-2022-0359, https://www.suse.com/security/cve/CVE-2022-0361, https://www.suse.com/security/cve/CVE-2022-0392, https://www.suse.com/security/cve/CVE-2022-0407, https://www.suse.com/security/cve/CVE-2022-0413, https://www.suse.com/security/cve/CVE-2022-0696, https://www.suse.com/security/cve/CVE-2022-1381, https://www.suse.com/security/cve/CVE-2022-1420, https://www.suse.com/security/cve/CVE-2022-1616, https://www.suse.com/security/cve/CVE-2022-1619, https://www.suse.com/security/cve/CVE-2022-1620, https://www.suse.com/security/cve/CVE-2022-1733, https://www.suse.com/security/cve/CVE-2022-1735, https://www.suse.com/security/cve/CVE-2022-1771, https://www.suse.com/security/cve/CVE-2022-1785, https://www.suse.com/security/cve/CVE-2022-1796, https://www.suse.com/security/cve/CVE-2022-1851, https://www.suse.com/security/cve/CVE-2022-1897, https://www.suse.com/security/cve/CVE-2022-1898, https://www.suse.com/security/cve/CVE-2022-1927