shield Security update for vim

SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-723

This update for vim fixes the following issues: Update to version 9.1.1101: - CVE-2024-43790: possible out-of-bounds read when performing a search command (bsc#1229685). - CVE-2024-43802: heap buffer overflow due to incorrect flushing of the typeahead buffer (bsc#1229822). - CVE-2024-45306: heap buffer overflow when cursor position is invalid (bsc#1230078). - CVE-2025-22134: heap buffer overflow when switching to other buffers using the :all command with active visual mode (bsc#1235695). - CVE-2025-24014: NULL pointer dereference may lead to segmentation fault when in silent Ex mode (bsc#1236151). - CVE-2025-1215: memory corruption when manipulating the --log argument (bsc#1237137).

• Release Date
  Feb 26 2025
• References
  Bugzilla: 1230078, 1229822, 1229685, 1236151, 1235695, 1237137
  CVEs: CVE-2024-45306, CVE-2025-24014, CVE-2025-1215, CVE-2024-43802, CVE-2025-22134, CVE-2024-43790
• Type
  security
• Severity
  moderate

cloud_download Downloads

Desktop Applications Module 15.6 ppc64le

• Packages
  gvim
  A GUI for Vi

  9.1.1101-150500.20.21.1 lock rpm

  vim
  Vi IMproved

  9.1.1101-150500.20.21.1 lock src

Desktop Applications Module 15.6 s390x

• Packages
  gvim
  A GUI for Vi

  9.1.1101-150500.20.21.1 lock rpm

  vim
  Vi IMproved

  9.1.1101-150500.20.21.1 lock src

Desktop Applications Module 15.6 aarch64

• Packages
  gvim
  A GUI for Vi

  9.1.1101-150500.20.21.1 lock rpm

  vim
  Vi IMproved

  9.1.1101-150500.20.21.1 lock src

Desktop Applications Module 15.6 x86_64

• Packages
  gvim
  A GUI for Vi

  9.1.1101-150500.20.21.1 lock rpm

  vim
  Vi IMproved

  9.1.1101-150500.20.21.1 lock src