ALAS2-2023-2319 — Low: vim security update (Amazon Linux 2)

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2023-5535: Use After Free in GitHub repository vim/vim prior to v9.0.2010. CVE-2023-5441: NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

Fixed packages 8

Release	Package	Fixed in
Amazon Linux · 2	vim-common	2:9.0.1882-1.amzn2.0.3
Amazon Linux · 2	vim-data	2:9.0.1882-1.amzn2.0.3
Amazon Linux · 2	vim-debuginfo	2:9.0.1882-1.amzn2.0.3
Amazon Linux · 2	vim-enhanced	2:9.0.1882-1.amzn2.0.3
Amazon Linux · 2	vim-filesystem	2:9.0.1882-1.amzn2.0.3
Amazon Linux · 2	vim-minimal	2:9.0.1882-1.amzn2.0.3
Amazon Linux · 2	vim-X11	2:9.0.1882-1.amzn2.0.3
Amazon Linux · 2	xxd	2:9.0.1882-1.amzn2.0.3

Vulnerabilities 2

High 7.8

CVE-2023-5535

Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to v9.0.2010.

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Oct 11, 2023
Medium 6.2

CVE-2023-5441

NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

vim vim/vim vim vim Debian Ubuntu Azure Linux

Oct 5, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-5441.html
web
https://alas.aws.amazon.com/cve/html/CVE-2023-5535.html

Low: vim security update (Amazon Linux 2)

Summary

Fixed packages 8

Vulnerabilities 2

Use After Free in vim/vim

NULL Pointer Dereference in vim/vim

References