ALAS2023-2023-403 — Low: vim security update (Amazon Linux 2023)

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-5535: Use After Free in GitHub repository vim/vim prior to v9.0.2010. CVE-2023-5441: NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

Fixed packages 12

Release	Package	Fixed in
Amazon Linux · 2023	vim-common	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-data	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-debuginfo	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-debugsource	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-default-editor	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-enhanced	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-enhanced-debuginfo	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-filesystem	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-minimal	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	vim-minimal-debuginfo	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	xxd	2:9.0.2010-1.amzn2023
Amazon Linux · 2023	xxd-debuginfo	2:9.0.2010-1.amzn2023

Vulnerabilities 2

High 7.8

CVE-2023-5535

Use After Free in vim/vim

Use After Free in GitHub repository vim/vim prior to v9.0.2010.

vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine

Oct 11, 2023
Medium 6.2

CVE-2023-5441

NULL Pointer Dereference in vim/vim

NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960.

vim vim/vim vim vim Debian Ubuntu Azure Linux

Oct 5, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-5441.html
web
https://alas.aws.amazon.com/cve/html/CVE-2023-5535.html

Low: vim security update (Amazon Linux 2023)

Summary

Fixed packages 12

Vulnerabilities 2

Use After Free in vim/vim

NULL Pointer Dereference in vim/vim

References