Recommended update for vim SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:4409-1 Final 1 1 2024-12-23T09:20:49Z current 2024-12-23T09:20:49Z 2024-12-23T09:20:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Recommended update for vim This update for vim fixes the following issues: - CVE-2024-47814: Fixed use-after-free when closing buffers in Vim (bsc#1231373) - CVE-2024-43374: Fixed use-after-free in alist_add() (bsc#1229238) Other fixes: - Remove patch that introduced a bug caused significantly more CPU usage (bsc#1220618) - Updated to version 9.1.0836 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2024-4409,Image SLES12-SP5-Azure-HPC-BYOS-2024-4409,Image SLES12-SP5-Azure-HPC-On-Demand-2024-4409,Image SLES12-SP5-Azure-SAP-BYOS-2024-4409,Image SLES12-SP5-Azure-SAP-On-Demand-2024-4409,Image SLES12-SP5-Azure-Standard-On-Demand-2024-4409,Image SLES12-SP5-EC2-BYOS-2024-4409,Image SLES12-SP5-EC2-ECS-On-Demand-2024-4409,Image SLES12-SP5-EC2-On-Demand-2024-4409,Image SLES12-SP5-EC2-SAP-BYOS-2024-4409,Image SLES12-SP5-EC2-SAP-On-Demand-2024-4409,Image SLES12-SP5-GCE-BYOS-2024-4409,Image SLES12-SP5-GCE-On-Demand-2024-4409,Image SLES12-SP5-GCE-SAP-BYOS-2024-4409,Image SLES12-SP5-GCE-SAP-On-Demand-2024-4409,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2024-4409,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2024-4409,SUSE-2024-4409,SUSE-SLE-SERVER-12-SP5-LTSS-2024-4409,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2024-4409 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20244409-1/ Link for SUSE-SU-2024:4409-1 https://lists.suse.com/pipermail/sle-security-updates/2024-December/020043.html E-Mail link for SUSE-SU-2024:4409-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1220618 SUSE Bug 1220618 https://bugzilla.suse.com/1229238 SUSE Bug 1229238 https://bugzilla.suse.com/1231373 SUSE Bug 1231373 https://www.suse.com/security/cve/CVE-2024-43374/ SUSE CVE CVE-2024-43374 page https://www.suse.com/security/cve/CVE-2024-47814/ SUSE CVE CVE-2024-47814 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 vim-9.1.0836-17.38.1 vim-data-common-9.1.0836-17.38.1 gvim-9.1.0836-17.38.1 vim-data-9.1.0836-17.38.1 vim-small-9.1.0836-17.38.1 vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-BYOS vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-BYOS vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-BYOS vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-BYOS vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-BYOS vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-BYOS vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production vim-9.1.0836-17.38.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production vim-data-common-9.1.0836-17.38.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production gvim-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS vim-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS vim-data-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS vim-data-common-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gvim-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 vim-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 vim-data-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 vim-data-common-9.1.0836-17.38.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers `Buf*` autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678. CVE-2024-43374 Image SLES12-SP5-Azure-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gvim-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:vim-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:vim-data-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:vim-data-common-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gvim-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:vim-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:vim-data-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:vim-data-common-9.1.0836-17.38.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20244409-1/ https://www.suse.com/security/cve/CVE-2024-43374.html CVE-2024-43374 https://bugzilla.suse.com/1229238 SUSE Bug 1229238 Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (visible in a window) a BufWinLeave auto command can cause an use-after-free if this auto command happens to re-open the same buffer in a new split window. Impact is low since the user must have intentionally set up such a strange auto command and run some buffer unload commands. However this may lead to a crash. This issue has been addressed in version 9.1.0764 and all users are advised to upgrade. There are no known workarounds for this vulnerability. CVE-2024-47814 Image SLES12-SP5-Azure-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.1.0836-17.38.1 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.1.0836-17.38.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gvim-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:vim-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:vim-data-9.1.0836-17.38.1 SUSE Linux Enterprise Server 12 SP5-LTSS:vim-data-common-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gvim-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:vim-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:vim-data-9.1.0836-17.38.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:vim-data-common-9.1.0836-17.38.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20244409-1/ https://www.suse.com/security/cve/CVE-2024-47814.html CVE-2024-47814 https://bugzilla.suse.com/1231373 SUSE Bug 1231373