Fedora Linux 8648 Published by

A vim security update has been released for Fedora 36.



SECURITY: Fedora 36 Update: vim-9.0.1307-1.fc36


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-93fb5b08eb
2023-02-18 01:27:01.797139
--------------------------------------------------------------------------------

Name : vim
Product : Fedora 36
Version : 9.0.1307
Release : 1.fc36
URL :   http://www.vim.org/
Summary : The VIM editor
Description :
VIM (VIsual editor iMproved) is an updated and improved version of the
vi editor. Vi was the first real screen-based editor for UNIX, and is
still very popular. VIM improves on vi by adding new features:
multiple windows, multi-level undo, block highlighting and more.

--------------------------------------------------------------------------------
Update Information:

2169641 - Syntax highlight for sh files broken ---- The newest upstream commit
Security fixes for CVE-2022-47024, CVE-2023-0433
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 14 2023 Zdenek Dohnal - 2:9.0.1307-1
- patchlevel 1307
* Tue Feb 14 2023 Zdenek Dohnal - 2:9.0.1293-2
- 2169641 - Syntax highlight for sh files broken
* Thu Feb 9 2023 Zdenek Dohnal - 2:9.0.1293-1
- patchlevel 1293
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2163612 - CVE-2023-0433 vim: reading past the end of a line when formatting text
  https://bugzilla.redhat.com/show_bug.cgi?id=2163612
[ 2 ] Bug #2163613 - CVE-2022-47024 vim: no check if the return value of XChangeGC() is NULL
  https://bugzilla.redhat.com/show_bug.cgi?id=2163613
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-93fb5b08eb' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________