Bugzilla – Bug 1206867
VUL-1: CVE-2023-0051: vim: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144.
Last modified: 2023-02-01 06:07:06 UTC
CVE-2023-0051 Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-0051 https://www.cve.org/CVERecord?id=CVE-2023-0051 https://github.com/vim/vim/commit/c32949b0779106ed5710ae3bffc5053e49083ab4 https://huntr.dev/bounties/1c8686db-baa6-42dc-ba45-aed322802de9
Affected: - openSUSE:Factory - SUSE:SLE-12:Update - SUSE:SLE-15:Update
SUSE-SU-2023:0211-1: An update that fixes 5 vulnerabilities is now available. Category: security (moderate) Bug References: 1206866,1206867,1206868,1207162,1207396 CVE References: CVE-2023-0049,CVE-2023-0051,CVE-2023-0054,CVE-2023-0288,CVE-2023-0433 JIRA References: Sources used: openSUSE Leap Micro 5.3 (src): vim-9.0.1234-150000.5.34.1 openSUSE Leap Micro 5.2 (src): vim-9.0.1234-150000.5.34.1 openSUSE Leap 15.4 (src): vim-9.0.1234-150000.5.34.1 SUSE Linux Enterprise Realtime Extension 15-SP3 (src): vim-9.0.1234-150000.5.34.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (src): vim-9.0.1234-150000.5.34.1 SUSE Linux Enterprise Module for Basesystem 15-SP4 (src): vim-9.0.1234-150000.5.34.1 SUSE Linux Enterprise Micro 5.3 (src): vim-9.0.1234-150000.5.34.1 SUSE Linux Enterprise Micro 5.2 (src): vim-9.0.1234-150000.5.34.1 SUSE Linux Enterprise Micro 5.1 (src): vim-9.0.1234-150000.5.34.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2023:0209-1: An update that fixes 12 vulnerabilities is now available. Category: security (important) Bug References: 1204779,1205797,1206028,1206071,1206072,1206075,1206077,1206866,1206867,1206868,1207162,1207396 CVE References: CVE-2022-3491,CVE-2022-3520,CVE-2022-3591,CVE-2022-3705,CVE-2022-4141,CVE-2022-4292,CVE-2022-4293,CVE-2023-0049,CVE-2023-0051,CVE-2023-0054,CVE-2023-0288,CVE-2023-0433 JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 9 (src): vim-9.0.1234-17.12.1 SUSE OpenStack Cloud 9 (src): vim-9.0.1234-17.12.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): vim-9.0.1234-17.12.1 SUSE Linux Enterprise Server 12-SP5 (src): vim-9.0.1234-17.12.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): vim-9.0.1234-17.12.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): vim-9.0.1234-17.12.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Fixed both for SLE12 and SLE15 with the recent update with 9.0.1234 version.