Medium ALAS2023-2023-378 1 CVE

Moderate: vim security update (Amazon Linux 2023)

Published Oct 12, 2023 · Updated Oct 24, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5344: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

Fixed packages 12

Release	Package	Fixed in
Amazon Linux · 2023	vim-common	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-data	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-debuginfo	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-debugsource	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-default-editor	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-enhanced	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-enhanced-debuginfo	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-filesystem	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-minimal	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	vim-minimal-debuginfo	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	xxd	2:9.0.1882-1.amzn2023.0.2
Amazon Linux · 2023	xxd-debuginfo	2:9.0.1882-1.amzn2023.0.2

Vulnerabilities 1

Medium 4.0

CVE-2023-5344

Heap-based Buffer Overflow in vim/vim

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969.

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Oct 2, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-5344.html