SUSE-SU-2023:0211-1

Details

This update for vim fixes the following issues:

Updated to version 9.0.1234:
- CVE-2023-0433: Fixed an out of bounds memory access that could cause a crash (bsc#1207396).
- CVE-2023-0288: Fixed an out of bounds memory access that could cause a crash (bsc#1207162).
- CVE-2023-0054: Fixed an out of bounds memory write that could cause a crash or memory corruption (bsc#1206868).
- CVE-2023-0051: Fixed an out of bounds memory access that could cause a crash (bsc#1206867).
- CVE-2023-0049: Fixed an out of bounds memory access that could cause a crash (bsc#1206866).

Affected Packages

vim

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Module for Desktop Applications 15 SP4

Fixed in:

9.0.1234-150000.5.34.1

vim-data-common

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

9.0.1234-150000.5.34.1

vim-small

SUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2SUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Real Time 15 SP3

Fixed in:

9.0.1234-150000.5.34.1

vim-data

SUSE Linux Enterprise Module for Basesystem 15 SP4SUSE Linux Enterprise Real Time 15 SP3openSUSE Leap 15.4

Fixed in:

9.0.1234-150000.5.34.1

gvim

SUSE Linux Enterprise Module for Desktop Applications 15 SP4SUSE Linux Enterprise Real Time 15 SP3openSUSE Leap 15.4

Fixed in:

9.0.1234-150000.5.34.1

References

REPORT