Affected: AlmaLinux:9: vim-X11, AlmaLinux:9: vim-common, AlmaLinux:9: vim-enhanced, AlmaLinux:9: vim-filesystem, AlmaLinux:9: vim-minimal

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: use-after-free in function ins_compl_get_exp in vim/vim (CVE-2023-4752)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected: Alpaquita:23: vim, Alpaquita:stream: vim

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

Affected: openEuler:20.03-LTS-SP1: vim, openEuler:20.03-LTS-SP3: vim, openEuler:22.03-LTS: vim, openEuler:22.03-LTS-SP1: vim, openEuler:22.03-LTS-SP2: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es): Use After Free in GitHub repository vim/vim prior to 9.0.1840.(CVE-2023-4733) Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.(CVE-2023-4734) Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.(CVE-2023-4735) Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.(CVE-2023-4736) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.(CVE-2023-4738) Use After Free in GitHub repository vim/vim prior to 9.0.1857.(CVE-2023-4750) Use After Free in GitHub repository vim/vim prior to 9.0.1858.(CVE-2023-4752) Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.(CVE-2023-4781)

vim: use-after-free in function ins_compl_get_exp in vim/vim

vim: use-after-free in function ins_compl_get_exp in vim/vim libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat rsync: Path traversal vulnerability in rsync rsync: --safe-links option bypass leads to path traversal libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS rsync: Race Condition in rsync Handling Symbolic Links requests: subsequent requests to the same host ignore cert verification git: The sideband payload is passed unfiltered to the terminal in git python: cpython: URL parser allowed square brackets in domain names krb5: overflow when calculating ulog block size openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled

Security update for vim

Affected: Ubuntu:20.04:LTS: vim, Ubuntu:22.04:LTS: vim

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

Gvariant offset table entry size is not checked in is_normal() G_variant_byteswap() can take a long time with some non-normal inputs Gvariant deserialisation does not match spec for non-normal data Glibc: dos due to memory leak in getaddrinfo.c Glibc: buffer overflow in ld.so leading to privilege escalation Gnutls: incomplete fix for cve-2023-5981 Gnutls: rejects certificate chain with distributed trust Denial-of-Service in gRPC Information leak in gRPC Denial-of-Service in gRPC Denial of Service in gRPC Core Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed) Incorrect cipher key & IV length processing POLY1305 MAC implementation corrupts XMM registers on Windows Excessive time spent checking DH q parameter value SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow NULL Pointer Dereference in vim/vim Heap-based Buffer Overflow in vim/vim Use After Free in vim/vim Heap-based Buffer Overflow in vim/vim Integer Overflow or Wraparound in vim/vim Use After Free in vim/vim Untrusted Search Path in vim/vim Out-of-bounds Write in vim/vim Use After Free in vim/vim Heap-based Buffer Overflow in vim/vim Use After Free in vim/vim Heap-based Buffer Overflow in vim/vim Use-After-Free in win_close() in vim overflow in shift_line in vim Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite Integer Overflow in :history command in Vim

Ein lokaler Angreifer kann mehrere Schwachstellen in vim ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen und Dateien zu manipulieren.