SUSE-SU-2023:3955-1: Security update for vim
This update for vim fixes the following issues: Security fixes: CVE-2023-4733: Fixed use-after-free in function buflistaltfpos (bsc#1215004). CVE-2023-4734: Fixed segmentation fault in function ffullcommand (bsc#1214925). CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). CVE-2023-4738: Fixed heap buffer overflow in vimregsubboth (bsc#1214922). CVE-2023-4752: Fixed heap use-after-free in function inscomplgetexp (bsc#1215006). CVE-2023-4781: Fixed heap buffer overflow in function vimregsubboth (bsc#1215033). Other fixes: Update to version 9.0 with patch level 1894, for the complete list of changes see https://github.com/vim/vim/compare/v9.0.1443...v9.0.1894 Use app icons generated from vimlogo.eps in the source tarball; add higher resolution icons of sizes 128x128, 256x256, and 512x512 as png sources
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/vim-data-commonto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/vim-smallto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/vim-small-debuginfoto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/vim-debugsourceto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/vim-debuginfoto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/vimto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/gvimto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/gvim-debuginfoto a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
suse/vim-datato a version that resolves this vulnerability.Fixed in 9.0.1894-150000.5.54.1 - Upgrade
Upgrade
vimto a version that resolves this vulnerability.Fixed in 9.0.1894
Event History
Child vulnerabilities
Contains the following vulnerabilities.