Linux · Security advisory · July 1, 2022

RHSA-2022:5242: Security update for 5 packages

RHSA-2022:5242, released July 1, 2022, fixes 6 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0238
83rd percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 5 Routine 1

Fixed package versions

ProductReleaseFixed in
vim-X11RHEL 92:8.2.2637-16.el9_0.2
vim-commonRHEL 92:8.2.2637-16.el9_0.2
vim-enhancedRHEL 92:8.2.2637-16.el9_0.2
vim-filesystemRHEL 92:8.2.2637-16.el9_0.2
vim-minimalRHEL 92:8.2.2637-16.el9_0.2

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-1621 vim-common: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: heap buffer overflo... 7.8 0.0238 None reported
High CVE-2022-1629 vim-common: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: heap buffer overflo... 7.8 0.0191 None reported
High CVE-2022-0554 vim-common: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Use of Out-of-range... 7.8 0.0167 None reported
High CVE-2022-1154 vim-common: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: use after free in u... 9.8 0.0146 None reported
High CVE-2022-0943 vim-common: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Use of Out-of-range... 7.8 0.0070 None reported
Routine CVE-2022-1420 xxd: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774. 6.1 0.0145 None reported
Showing 1 to 6 of 6 1