Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

openSUSE 15.x: SUSE-SU-2024:4330-1 low: vim use-after-free

opensuse
Calendar Grey December 16, 2024
Scroller Opensuse
A security update for vim addresses use-after-free vulnerabilities present in openSUSE, classified with a low severity score. Further information included.
An update that solves two vulnerabilities can now be installed.

Description

This update for vim fixes the following issues:

* CVE-2024-47814: Fixed use-after-free when closing buffers in Vim

(bsc#1231373)

* CVE-2024-43374: Fixed use-after-free in alist_add() (bsc#1229238)

Other fixes:

* Updated to version 9.1.0836

Topics%20covered

Topics Covered

security advisory low severity vim update openSUSE use-after-free patch instructions

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.5

zypper in -t patch SUSE-2024-4330=1 openSUSE-SLE-15.5-2024-4330=1

* openSUSE Leap Micro 5.5

zypper in -t patch openSUSE-Leap-Micro-5.5-2024-4330=1

* openSUSE Leap 15.6

zypper in -t patch openSUSE-SLE-15.6-2024-4330=1

* SUSE Linux Enterprise Micro 5.5

zypper in -t patch SUSE-SLE-Micro-5.5-2024-4330=1

* Basesystem Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2024-4330=1

* Basesystem Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-4330=1

* Desktop Applications Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP5-2024-4330=1

* Desktop Applications Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2024-4330=1

Package List

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 i586)

* vim-small-9.1.0836-150500.20.15.1

* gvim-9.1.0836-150500.20.15.1

* vim-debuginfo-9.1.0836-150500.20.15.1

* gvim-debuginfo-9.1.0836-150500.20.15.1

* vim-small-debuginfo-9.1.0836-150500.20.15.1

* vim-debugsource-9.1.0836-150500.20.15.1

* vim-9.1.0836-150500.20.15.1

* openSUSE Leap 15.5 (noarch)

* vim-data-common-9.1.0836-150500.20.15.1

* vim-data-9.1.0836-150500.20.15.1

* openSUSE Leap Micro 5.5 (noarch)

* vim-data-common-9.1.0836-150500.20.15.1

* openSUSE Leap Micro 5.5 (aarch64 s390x x86_64)

* vim-debugsource-9.1.0836-150500.20.15.1

* vim-debuginfo-9.1.0836-150500.20.15.1

* vim-small-9.1.0836-150500.20.15.1

* vim-small-debuginfo-9.1.0836-150500.20.15.1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64)

* vim-small-9.1.0836-150500.20.15.1

* gvim-9.1.0836-150500.20.15.1

* vim-debuginfo-9.1.0836-150500.20.15.1

* gvim-debuginfo-9.1.0836-150500.20.15.1

* vim-small-debuginfo-9.1.0836-150500.20.15.1

* vim-debugsource-9.1.0836-150500.20.15.1

*...

Read the Full Advisory

References

* bsc#1229238

* bsc#1231373

## References:

* https://www.suse.com/security/cve/CVE-2024-43374.html

* https://www.suse.com/security/cve/CVE-2024-47814.html

* https://bugzilla.suse.com/show_bug.cgi?id=1229238

* https://bugzilla.suse.com/show_bug.cgi?id=1231373

Severity
low
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:4330-1
Release Date: 2024-12-16T13:17:36Z
Affected Products: * Basesystem Module 15-SP5 * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP5 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.5 * openSUSE Leap 15.6 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP6

Topics%20covered

Topics Covered

security advisory low severity vim update openSUSE use-after-free patch instructions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.