CLSA-2022-1658854080 Fixed CVEs in vim: CVE-2022-2289, CVE-2022-2304

CVE-2022-2289: bail out when diff pointer is no longer valid to avoid accessing freed memory with diff put - CVE-2022-2304: limit the word length to avoid out of bound accesing...

Fedora: Security Advisory for golang-github-pkg-diff (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PT-2022-7129

Name of the Vulnerable Software and Affected Versions vim versions prior to 9.0.0100 Description The issue is related to an out-of-bounds write in the vim text editor, specifically in the diff write buffer function. This allows an attacker to cause a denial of service using a specially crafted...

Fixed CVEs in vim: CVE-2022-2183, CVE-2022-2182, CVE-2022-2207, CVE-2022-2210

CVE-2022-2182: when on line zero check the column is valid for line one - CVE-2022-2183: avoid going over the NUL at the end of the line - CVE-2022-2207: check the cursor column is more than zero - CVE-2022-2210: use zero offset when change removes all lines in a diff block...

CLSA-2022-1657817751 Fixed CVEs in vim: CVE-2022-2183, CVE-2022-2182, CVE-2022-2207, CVE-2022-2210

CVE-2022-2182: when on line zero check the column is valid for line one - CVE-2022-2183: avoid going over the NUL at the end of the line - CVE-2022-2207: check the cursor column is more than zero - CVE-2022-2210: use zero offset when change removes all lines in a diff block...

CLSA-2022-1657816156 Fixed CVEs in vim: CVE-2022-2210, CVE-2022-2183, CVE-2022-2207, CVE-2022-2182

CVE-2022-2182: when on line zero check the column is valid for line one - CVE-2022-2183: avoid going over the NUL at the end of the line - CVE-2022-2207: check the cursor column is more than zero - CVE-2022-2210: use zero offset when change removes all lines in a diff block...

The vulnerability in the diff.c component of the Vim text editor allows a attacker to perform a type of attack known as a “Denial-of-Service” (DoS) attack.

The vulnerability of the diff.c component in the Vim text editor is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to execute a DoS attack remotely...

Fedora: Security Advisory for golang-github-pkg-diff (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-pkg-diff-0-0.4.20210406git20ebb0f.fc36

Module github.com/pkg/diff can be used to create, modify, and print diffs. The top level package, diff, contains convenience functions for the most comm on uses. The subpackages provide very fine-grained control over every aspect: - myers: creates diffs using the Myers diff algorithm. - edit:...

Vim 代码问题漏洞

Vim is a cross-platform text editor. versions of Vim prior to 8.2.5163 have a security vulnerability that stems from a null pointer dereference in the diffcheck function, which can be exploited by an attacker to crash, exit, or restart the service...

CVE-2022-33127: Undefined Security Weakness

The function that calls the diff tool in Diffy 3.4.1 does not properly handle double quotes in a filename when run in a windows environment. This allows attackers to execute arbitrary commands via a crafted string...

Malicious code in updated-object-diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 885310f38d0389ecf8aedaedfb13c2c0c5ded39288b3be8064612bd6989087c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6802 Malicious code in updated-object-diff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 885310f38d0389ecf8aedaedfb13c2c0c5ded39288b3be8064612bd6989087c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1086 Malicious code in argocd-diff-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718ff427530768bc006e381b08ab59421bd7258c90823243b8039334322b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in argocd-diff-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51718ff427530768bc006e381b08ab59421bd7258c90823243b8039334322b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dom-diff-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4c301b5a0e0d35368e170095106455c8a815ad97bb192887609b61e482179d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2467 Malicious code in diff-dom-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f64e6aafd5d8ac32a54d93dd52a12fec3af6efeaba3d6a301ee9f42e7de3dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in diff-dom-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f64e6aafd5d8ac32a54d93dd52a12fec3af6efeaba3d6a301ee9f42e7de3dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2560 Malicious code in dom-diff-exporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4c301b5a0e0d35368e170095106455c8a815ad97bb192887609b61e482179d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: perl-Text-Diff

An update is available for perl-Text-Diff. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...