MGASA-2024-0285
- Source
- https://advisories.mageia.org/MGASA-2024-0285.html
- Import Source
- https://advisories.mageia.org/MGASA-2024-0285.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2024-0285
- Related
- Published
- 2024-09-09T19:00:01Z
- Modified
- 2024-09-09T18:37:05Z
- Summary
- Updated vim packages fix security vulnerabilities
- Details
-
Use-after-free in tagstackclearentry() in Vim < v9.1.0647. (CVE-2024-41957) Use-after-free in alist_add() in Vim < v9.1.0678. (CVE-2024-43374)
- References
-
- https://advisories.mageia.org/MGASA-2024-0285.html
- https://bugs.mageia.org/show_bug.cgi?id=33504
- https://openwall.com/lists/oss-security/2024/08/01/1
- https://openwall.com/lists/oss-security/2024/08/01/2
- https://openwall.com/lists/oss-security/2024/08/15/6
- https://openwall.com/lists/oss-security/2024/08/22/3
- https://openwall.com/lists/oss-security/2024/08/25/1
- https://openwall.com/lists/oss-security/2024/08/31/1
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:9 / vim
Package
- Name
- vim
- Purl
- pkg:rpm/mageia/vim?distro=mageia-9