Low: vim

2017-03-29T21:43:00
ID ALAS-2017-809
Type amazon
Reporter Amazon
Modified 2017-03-29T21:43:00

Description

Issue Overview:

An integer overflow flaw was found in the way vim handled tree length values when reading an undo file. This bug could result in vim crashing when trying to process corrupted undo files. (CVE-2017-6350 __)

An integer overflow flaw was found in the way vim handled undo files. This bug could result in vim crashing when trying to process corrupted undo files.(CVE-2017-6349 __)

vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may result in an integer overflow at a memory allocation site and a resultant buffer overflow. (CVE-2017-5953 __)

Affected Packages:

vim

Issue Correction:
Run yum update vim to update your system.

New Packages:

i686:  
    vim-debuginfo-8.0.0503-1.45.amzn1.i686  
    vim-enhanced-8.0.0503-1.45.amzn1.i686  
    vim-minimal-8.0.0503-1.45.amzn1.i686  
    vim-filesystem-8.0.0503-1.45.amzn1.i686  
    vim-common-8.0.0503-1.45.amzn1.i686

src:  
    vim-8.0.0503-1.45.amzn1.src

x86_64:  
    vim-enhanced-8.0.0503-1.45.amzn1.x86_64  
    vim-filesystem-8.0.0503-1.45.amzn1.x86_64  
    vim-debuginfo-8.0.0503-1.45.amzn1.x86_64  
    vim-common-8.0.0503-1.45.amzn1.x86_64  
    vim-minimal-8.0.0503-1.45.amzn1.x86_64