Security update for vim SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3942-1 Final 1 1 2023-10-03T15:14:49Z current 2023-10-03T15:14:49Z 2023-10-03T15:14:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for vim This update for vim fixes the following issues: Security fixes: - CVE-2023-4733: Fixed use-after-free in function buflist_altfpos (bsc#1215004). - CVE-2023-4734: Fixed segmentation fault in function f_fullcommand (bsc#1214925). - CVE-2023-4735: Fixed out of bounds write in ops.c (bsc#1214924). - CVE-2023-4738: Fixed heap buffer overflow in vim_regsub_both (bsc#1214922). - CVE-2023-4752: Fixed heap use-after-free in function ins_compl_get_exp (bsc#1215006). - CVE-2023-4781: Fixed heap buffer overflow in function vim_regsub_both (bsc#1215033). Other fixes: - Calling vim on xterm leads to missing first character of the command prompt (bsc#1211461) - Rendering corruption in gvim with all 9.x versions (bsc#1210738) - Updated to version 9.0 with patch level 1894 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2023-3942,Image SLES12-SP5-Azure-Basic-On-Demand-2023-3942,Image SLES12-SP5-Azure-HPC-BYOS-2023-3942,Image SLES12-SP5-Azure-HPC-On-Demand-2023-3942,Image SLES12-SP5-Azure-SAP-BYOS-2023-3942,Image SLES12-SP5-Azure-SAP-On-Demand-2023-3942,Image SLES12-SP5-Azure-Standard-On-Demand-2023-3942,Image SLES12-SP5-EC2-BYOS-2023-3942,Image SLES12-SP5-EC2-ECS-On-Demand-2023-3942,Image SLES12-SP5-EC2-On-Demand-2023-3942,Image SLES12-SP5-EC2-SAP-BYOS-2023-3942,Image SLES12-SP5-EC2-SAP-On-Demand-2023-3942,Image SLES12-SP5-GCE-BYOS-2023-3942,Image SLES12-SP5-GCE-On-Demand-2023-3942,Image SLES12-SP5-GCE-SAP-BYOS-2023-3942,Image SLES12-SP5-GCE-SAP-On-Demand-2023-3942,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2023-3942,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2023-3942,SUSE-2023-3942,SUSE-SLE-SERVER-12-SP5-2023-3942 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233942-1/ Link for SUSE-SU-2023:3942-1 https://lists.suse.com/pipermail/sle-security-updates/2023-October/016483.html E-Mail link for SUSE-SU-2023:3942-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1210738 SUSE Bug 1210738 https://bugzilla.suse.com/1211461 SUSE Bug 1211461 https://bugzilla.suse.com/1214922 SUSE Bug 1214922 https://bugzilla.suse.com/1214924 SUSE Bug 1214924 https://bugzilla.suse.com/1214925 SUSE Bug 1214925 https://bugzilla.suse.com/1215004 SUSE Bug 1215004 https://bugzilla.suse.com/1215006 SUSE Bug 1215006 https://bugzilla.suse.com/1215033 SUSE Bug 1215033 https://www.suse.com/security/cve/CVE-2023-4733/ SUSE CVE CVE-2023-4733 page https://www.suse.com/security/cve/CVE-2023-4734/ SUSE CVE CVE-2023-4734 page https://www.suse.com/security/cve/CVE-2023-4735/ SUSE CVE CVE-2023-4735 page https://www.suse.com/security/cve/CVE-2023-4738/ SUSE CVE CVE-2023-4738 page https://www.suse.com/security/cve/CVE-2023-4752/ SUSE CVE CVE-2023-4752 page https://www.suse.com/security/cve/CVE-2023-4781/ SUSE CVE CVE-2023-4781 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 vim-9.0.1894-17.23.2 vim-data-common-9.0.1894-17.23.2 gvim-9.0.1894-17.23.2 vim-data-9.0.1894-17.23.2 vim-small-9.0.1894-17.23.2 vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-BYOS vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-BYOS vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-Basic-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-Basic-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-HPC-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-HPC-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-Standard-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-Azure-Standard-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-BYOS vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-BYOS vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-ECS-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-ECS-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-BYOS vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-BYOS vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production vim-9.0.1894-17.23.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production vim-data-common-9.0.1894-17.23.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production gvim-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server 12 SP5 vim-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server 12 SP5 vim-data-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server 12 SP5 vim-data-common-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server 12 SP5 gvim-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 vim-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 vim-data-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 vim-data-common-9.0.1894-17.23.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 Image SLES12-SP5-Azure-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-common-9.0.1894-17.23.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233942-1/ https://www.suse.com/security/cve/CVE-2023-4733.html CVE-2023-4733 https://bugzilla.suse.com/1215004 SUSE Bug 1215004 https://bugzilla.suse.com/1217411 SUSE Bug 1217411 https://bugzilla.suse.com/1218353 SUSE Bug 1218353 https://bugzilla.suse.com/1221583 SUSE Bug 1221583 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846. CVE-2023-4734 Image SLES12-SP5-Azure-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-common-9.0.1894-17.23.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233942-1/ https://www.suse.com/security/cve/CVE-2023-4734.html CVE-2023-4734 https://bugzilla.suse.com/1214925 SUSE Bug 1214925 Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847. CVE-2023-4735 Image SLES12-SP5-Azure-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-common-9.0.1894-17.23.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233942-1/ https://www.suse.com/security/cve/CVE-2023-4735.html CVE-2023-4735 https://bugzilla.suse.com/1214924 SUSE Bug 1214924 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848. CVE-2023-4738 Image SLES12-SP5-Azure-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-common-9.0.1894-17.23.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233942-1/ https://www.suse.com/security/cve/CVE-2023-4738.html CVE-2023-4738 https://bugzilla.suse.com/1214922 SUSE Bug 1214922 https://bugzilla.suse.com/1217411 SUSE Bug 1217411 https://bugzilla.suse.com/1218353 SUSE Bug 1218353 https://bugzilla.suse.com/1221583 SUSE Bug 1221583 Use After Free in GitHub repository vim/vim prior to 9.0.1858. CVE-2023-4752 Image SLES12-SP5-Azure-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-common-9.0.1894-17.23.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233942-1/ https://www.suse.com/security/cve/CVE-2023-4752.html CVE-2023-4752 https://bugzilla.suse.com/1215006 SUSE Bug 1215006 https://bugzilla.suse.com/1217411 SUSE Bug 1217411 https://bugzilla.suse.com/1218353 SUSE Bug 1218353 https://bugzilla.suse.com/1221583 SUSE Bug 1221583 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. CVE-2023-4781 Image SLES12-SP5-Azure-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Basic-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-HPC-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-Azure-Standard-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-ECS-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-EC2-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-BYOS:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-9.0.1894-17.23.2 Image SLES12-SP5-GCE-SAP-On-Demand:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-9.0.1894-17.23.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server 12 SP5:vim-data-common-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:gvim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-9.0.1894-17.23.2 SUSE Linux Enterprise Server for SAP Applications 12 SP5:vim-data-common-9.0.1894-17.23.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233942-1/ https://www.suse.com/security/cve/CVE-2023-4781.html CVE-2023-4781 https://bugzilla.suse.com/1215033 SUSE Bug 1215033 https://bugzilla.suse.com/1215457 SUSE Bug 1215457 https://bugzilla.suse.com/1217411 SUSE Bug 1217411 https://bugzilla.suse.com/1218353 SUSE Bug 1218353 https://bugzilla.suse.com/1221583 SUSE Bug 1221583