Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-7047

Высокий

ALT-PU-2023-7047: package vim update to version 9.0.2081-alt1

Источник
errata.altlinux.org
Дата публикации
13.11.2023
Дата обновления
04.02.2026
Устраненные уязвимости
4

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades vim to version 9.0.2081-alt1.

Устраненные уязвимости4

Связанные уязвимости

suse-cvrf
почти 3 года назад

Security update for vim

suse-cvrf
почти 3 года назад

Security update for vim

CVSS3: 7.8
altlinux
около 3 лет назад

ALT-PU-2023-6840: package `vim` update to version 9.0.2081-alt1

suse-cvrf
почти 3 года назад

Security update for vim

CVSS3: 5.5
ubuntu
около 3 лет назад

Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c` at line 748, which is freed in the file `src/ex_docmd.c` in the function `do_cmdline` at line 1010 and then used again in `src/cmdhist.c` at line 759. When using the `:history` command, it's possible that the provided argument overflows the accepted value. Causing an Integer Overflow and potentially later an use-after-free. This vulnerability has been patched in version 9.0.2068.