Re: [LFS Trac] #4500: vim-9.1.???? (Update before release)

#4500: vim-9.1.???? (Update before release)
-------------------------+-----------------------
 Reporter:  Bruce Dubbs  |       Owner:  lfs-book
     Type:  task         |      Status:  new
 Priority:  normal       |   Milestone:  Hold
Component:  Book         |     Version:  git
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+-----------------------
Comment (by Douglas R. Reno):

 {{{
 heap-buffer-overflow with visual mode in Vim < 9.1.1003
 =======================================================
 Date: 11.01.2025
 Severity: Medium
 CVE: CVE-2025-22134
 CWE: Heap-based Buffer Overflow (CWE-122)

 When switching to other buffers using the :all command and visual mode
 still being active, this may cause a heap-buffer overflow, because Vim
 does not properly end visual mode and therefore may try to access
 beyond the end of a line in a buffer.

 In Patch 9.1.1003 Vim will correctly reset the visual mode before
 opening other windows and buffers and therefore fix this bug.  In
 addition it does verify that it won't try to access a position if the
 position is greater than the corresponding buffer line.

 Impact is medium since the user must have switched on visual mode when
 executing the :all ex command.

 The issue has been fixed as of Vim patch v9.1.1003

 The Vim project would like to thank github user gandalf4a for reporting
 this issue.

 References:
 https://github.com/vim/vim/commit/c9a1e257f1630a0866447e53a564f7ff96a80ead
 https://github.com/vim/vim/security/advisories/GHSA-5rgf-26wj-48v8
 }}}
-- 
Ticket URL: <https://wiki.linuxfromscratch.org/lfs/ticket/4500#comment:34>
LFS Trac <https://wiki.linuxfromscratch.org/lfs/>
Linux From Scratch: Your Distro, Your Rules.

-- 
http://lists.linuxfromscratch.org/sympa/info/lfs-book
Unsubscribe: See the above information page