Linux · Security advisory · March 15, 2022

RHSA-2022:0894: Security update for 5 packages

RHSA-2022:0894, released March 15, 2022, fixes 6 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0203
81st percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
vim-X11RHEL 82:8.0.1763-16.el8_5.12
vim-commonRHEL 82:8.0.1763-16.el8_5.12
vim-enhancedRHEL 82:8.0.1763-16.el8_5.12
vim-filesystemRHEL 82:8.0.1763-16.el8_5.12
vim-minimalRHEL 82:8.0.1763-16.el8_5.12

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-0318 vim: Heap-based Buffer Overflow in vim/vim prior to 8.2. 9.8 0.0203 None reported
High CVE-2022-0261 vim-tiny: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. 7.8 0.0168 None reported
High CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. 7.8 0.0157 None reported
High CVE-2022-0392 vim-runtime: Heap-based Buffer Overflow in GitHub repository vim prior to 8.2. 7.8 0.0151 None reported
High CVE-2022-0413 vim: Use After Free in GitHub repository vim/vim prior to 8.2. 7.8 0.0139 None reported
High CVE-2022-0359 xxd: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. 7.8 0.0134 None reported
Showing 1 to 6 of 6 1