Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 39: 2023-8d3e34b9f1d Important: Vim Memory Safety Update

fedora
Calendar Grey September 18, 2023
Dist Fedora Esm H88
Patch release for Nano in Ubuntu 22.04 focusing on security vulnerabilities, improving stability with essential updates and modifications.
- patchlevel 1872 ---- The newest upstream commit Security fixes for CVE-2023-4733, CVE-2023-4752, CVE-2023-4750

Summary

VIM (VIsual editor iMproved) is an updated and improved version of the

vi editor. Vi was the first real screen-based editor for UNIX, and is

still very popular. VIM improves on vi by adding new features:

multiple windows, multi-level undo, block highlighting and more.

Update Information:

- patchlevel 1872 ---- The newest upstream commit Security fixes for CVE-2023-4733, CVE-2023-4752, CVE-2023-4750

Topics%20covered

Topics Covered

security advisory critical Fedora patch vim use-after-free

Change Log

* Tue Sep 5 2023 Zdenek Dohnal - 2:9.0.1872-1 - patchlevel 1872 * Wed Aug 30 2023 Zdenek Dohnal - 2:9.0.1822-1 - patchlevel 1822

References


[ 1 ] Bug #2237311 - CVE-2023-4752 vim: use-after-free in function ins_compl_get_exp in vim/vim https://bugzilla.redhat.com/show_bug.cgi?id=2237311 [ 2 ] Bug #2237314 - CVE-2023-4750 vim: use-after-free in function bt_quickfix https://bugzilla.redhat.com/show_bug.cgi?id=2237314 [ 3 ] Bug #2237315 - CVE-2023-4733 vim: use-after-free in function buflist_altfpos https://bugzilla.redhat.com/show_bug.cgi?id=2237315

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-1c2c29a683' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
important
Lowest
Low
Medium
High
Critical

Name: vim
Product: Fedora 39
Version: 9.0.1872
Release: 1.fc39
URL: https://www.vim.org/
Summary: The VIM editor

Topics%20covered

Topics Covered

security advisory critical Fedora patch vim use-after-free

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here