Amazon Linux 2023 Security Advisory: ALAS-2023-403
Advisory Release Date: 2023-10-30 23:43 Pacific
Advisory Updated Date: 2023-11-03 22:36 Pacific
Severity:
Low
Issue Overview:
The severity level was changed from Medium to Low.
NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. (CVE-2023-5441)
Use After Free in GitHub repository vim/vim prior to v9.0.2010. (CVE-2023-5535)
Affected Packages:
vim
Issue Correction:
Run dnf update vim --releasever 2023.2.20231030 to update your system.
New Packages:
aarch64:
vim-enhanced-debuginfo-9.0.2010-1.amzn2023.aarch64
vim-debuginfo-9.0.2010-1.amzn2023.aarch64
vim-minimal-debuginfo-9.0.2010-1.amzn2023.aarch64
vim-minimal-9.0.2010-1.amzn2023.aarch64
xxd-debuginfo-9.0.2010-1.amzn2023.aarch64
xxd-9.0.2010-1.amzn2023.aarch64
vim-enhanced-9.0.2010-1.amzn2023.aarch64
vim-debugsource-9.0.2010-1.amzn2023.aarch64
vim-common-9.0.2010-1.amzn2023.aarch64
noarch:
vim-filesystem-9.0.2010-1.amzn2023.noarch
vim-default-editor-9.0.2010-1.amzn2023.noarch
vim-data-9.0.2010-1.amzn2023.noarch
src:
vim-9.0.2010-1.amzn2023.src
x86_64:
vim-enhanced-debuginfo-9.0.2010-1.amzn2023.x86_64
xxd-9.0.2010-1.amzn2023.x86_64
vim-minimal-debuginfo-9.0.2010-1.amzn2023.x86_64
vim-minimal-9.0.2010-1.amzn2023.x86_64
vim-enhanced-9.0.2010-1.amzn2023.x86_64
xxd-debuginfo-9.0.2010-1.amzn2023.x86_64
vim-debuginfo-9.0.2010-1.amzn2023.x86_64
vim-debugsource-9.0.2010-1.amzn2023.x86_64
vim-common-9.0.2010-1.amzn2023.x86_64