[Bugs] [Bug 13339] New: [CVE 21] vim 9.0.1021 CVEs found

[bugzilla]

https://bugzilla.rosalinux.ru/show_bug.cgi?id=13339

          Platform: 2021.1
            Bug ID: 13339
           Summary: [CVE 21] vim 9.0.1021  CVEs found
    Classification: ROSA-based products
           Product: ROSA Fresh
           Version: All
          Hardware: All
               URL: CVE-2023-0049, CVE-2023-0051, CVE-2023-0054,
                    CVE-2023-0288, CVE-2023-0433, CVE-2023-0512,
                    CVE-2023-1127, CVE-2023-1170, CVE-2023-1175,
                    CVE-2023-1264, CVE-2023-1355,
                OS: Linux
            Status: CONFIRMED
          Severity: normal
          Priority: Normal
         Component: System (kernel, glibc, systemd, bash, PAM...)
          Assignee: bugs на lists.rosalinux.ru
          Reporter: y.tumanov на rosalinux.ru
        QA Contact: bugs на lists.rosalinux.ru
                CC: s.matveev на rosalinux.ru, y.tumanov на rosalinux.ru
  Target Milestone: ---
             Flags: secteam_verified?

Please patch CVEs for package vim version 9.0.1021

INFO (CVEs are): vim 9.0.1021
 cves found
CVE-2023-0049
Desc: Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0049
Severity: HIGH
CVE-2023-0051
Desc: Heap-based Buffer Overflow in GitHub repository vim/vim prior to
9.0.1144.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0051
Severity: HIGH
CVE-2023-0054
Desc: Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0054
Severity: HIGH
CVE-2023-0288
Desc: Heap-based Buffer Overflow in GitHub repository vim/vim prior to
9.0.1189.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0288
Severity: HIGH
CVE-2023-0433
Desc: Heap-based Buffer Overflow in GitHub repository vim/vim prior to
9.0.1225.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0433
Severity: HIGH
CVE-2023-0512
Desc: Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-0512
Severity: HIGH
CVE-2023-1127
Desc: Divide By Zero in GitHub repository vim/vim prior to 9.0.1367.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1127
Severity: HIGH
CVE-2023-1170
Desc: Heap-based Buffer Overflow in GitHub repository vim/vim prior to
9.0.1376.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1170
Severity: MEDIUM
CVE-2023-1175
Desc: Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior
to 9.0.1378.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1175
Severity: MEDIUM
CVE-2023-1264
Desc: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1264
Severity: MEDIUM
CVE-2023-1355
Desc: NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1402.
Link: https://nvd.nist.gov/vuln/detail/CVE-2023-1355
Severity: MEDIUM

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
----------- следущая часть -----------
Вложение в формате HTML было извлечено…
URL: <http://lists.rosalinux.ru/pipermail/bugs/attachments/20230503/2e65c083/attachment-0001.html>