Security Vulnerabilities fixed in vim RHSA-2021:4517

Description

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c (CVE-2021-3778) vim: use-after-free in nv_replace() in normal.c (CVE-2021-3796) vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c (CVE-2021-3778) vim: use-after-free in nv_replace() in normal.c (CVE-2021-3796) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section. SolutionFor details on how to apply this update, which includes the changes described in this advisory, refer to:https://access.redhat.com/articles/11258

Affected Applications

vim

CVE References

CVE-2021-3778 CVE-2021-3796

Other References

https://access.redhat.com/errata/RHSA-2021:4517