Assigning to tv whose baby this is, CC'ing neoclust who did some recent patches.

CC: (none) => mageia
Assignee: bugsquad => thierry.vignaud

Fedora has issued an advisory today (November 3):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/DU26T75PYA3OF7XJGNKMT2ZCQEU4UKP5/

The issue is fixed upstream in 8.2.3564.

Status comment: Fixed upstream in 8.2.3489 => Fixed upstream in 8.2.3564
Summary: vim new security issues CVE-2021-3872 and CVE-2021-3875 => vim new security issues CVE-2021-3872, CVE-2021-3875, CVE-2021-3903

Apparently there are some other recent security fixes upstream, like this one that supposedly has a CVE:
https://github.com/vim/vim/commit/0b5b06cb4777d1401fdf83e7d48d287662236e7e

We should update to the latest (currently 8.2.3582).

Fedora has issued an advisory today (November 10):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/PGW56Z6IN4UVM3E5RXXF4G7LGGTRBI5C/

It has the two new CVEs, fixed in 8.2.3582.

Summary: vim new security issues CVE-2021-3872, CVE-2021-3875, CVE-2021-3903 => vim new security issues CVE-2021-3872, CVE-2021-3875, CVE-2021-3903, CVE-2021-392[78]
Status comment: Fixed upstream in 8.2.3564 => Fixed upstream in 8.2.3582

Ubuntu has issued an advisory for this on November 15:
https://ubuntu.com/security/notices/USN-5147-1

as seen with thierry, i updated the release of vim.


src:
    - vim-8.2.3582-1.mga8

CC: (none) => thierry.vignaud
Assignee: thierry.vignaud => qa-bugs

vim-minimal-8.2.3582-1.mga8
vim-enhanced-8.2.3582-1.mga8
vim-X11-8.2.3582-1.mga8
vim-common-8.2.3582-1.mga8

from vim-8.2.3582-1.mga8.src.rpm

MG8-64, Xfce

The following 4 packages are going to be installed:

- vim-common-8.2.3582-1.mga8.x86_64
- vim-enhanced-8.2.3582-1.mga8.x86_64
- vim-minimal-8.2.3582-1.mga8.x86_64
- vim-X11-8.2.3582-1.mga8.x86_64

4.5MB of additional disk space will be used.

I used vim from terminal creating and edit small and large files
gvim - perforemd the same

This is working for me.

CC: (none) => brtians1

Hi,

Mageia 8 X64 Gnome

rpm -qa | grep vim
vim-X11-8.2.3582-1.mga8
vim-common-8.2.3582-1.mga8
vim-enhanced-8.2.3582-1.mga8
vim-minimal-8.2.3582-1.mga8

Works fine.

CC: (none) => hdetavernier

Fedora has issued an advisory today (November 24):
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/IH2LS2DXBTYOCWGAKFMBF3HTWWXPBEFL/

Three new issues are fixed upstream in 8.2.3612.

Status comment: (none) => Fixed upstream in 8.2.3612
Assignee: qa-bugs => mageia

again fixed in mga8:

src:
    - vim-8.2.3642-1.mga8

Assignee: mageia => qa-bugs
Status comment: Fixed upstream in 8.2.3612 => (none)

vim-X11-8.2.3642-1.mga8
vim-enhanced-8.2.3642-1.mga8
vim-minimal-8.2.3642-1.mga8
vim-common-8.2.3642-1.mga8

from vim-8.2.3642-1.mga8.src.rpm

upgraded

working for me.  

I used both vim on terminal and gvim from menu.

MGA8-64 Plasma on Lenovo B50
No installation issues.
Used vimw to edit some text file: works OK after searching my memory for vi commands-phew....

Whiteboard: (none) => MGA8-64-OK
CC: (none) => herman.viaene

Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0535.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED

This update also fixed CVE-2021-3984:
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FNXY7T5OORA7UJIMGSJBGHFMU6UZWS6P/