OESA-2024-1982

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1982
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-1982.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2024-1982
Upstream
Published
2024-08-16T11:08:48Z
Modified
2025-08-12T05:45:09.377435Z
Summary
vim security update
Details

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647(CVE-2024-41957)

Vim is an open source command line text editor. double-free in dialog_changed() in Vim < v9.1.0648. When abandoning a buffer, Vim may ask the user what to do with the modified buffer. If the user wants the changed buffer to be saved, Vim may create a new Untitled file, if the buffer did not have a name yet. However, when setting the buffer name to Unnamed, Vim will falsely free a pointer twice, leading to a double-free and possibly later to a heap-use-after-free, which can lead to a crash. The issue has been fixed as of Vim patch v9.1.0648.(CVE-2024-41965)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:22.03-LTS-SP3 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-24.oe2203sp3

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-24.oe2203sp3.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-24.oe2203sp3.aarch64.rpm",
        "vim-common-9.0-24.oe2203sp3.aarch64.rpm",
        "vim-debuginfo-9.0-24.oe2203sp3.aarch64.rpm",
        "vim-debugsource-9.0-24.oe2203sp3.aarch64.rpm",
        "vim-enhanced-9.0-24.oe2203sp3.aarch64.rpm",
        "vim-minimal-9.0-24.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-24.oe2203sp3.x86_64.rpm",
        "vim-common-9.0-24.oe2203sp3.x86_64.rpm",
        "vim-debuginfo-9.0-24.oe2203sp3.x86_64.rpm",
        "vim-debugsource-9.0-24.oe2203sp3.x86_64.rpm",
        "vim-enhanced-9.0-24.oe2203sp3.x86_64.rpm",
        "vim-minimal-9.0-24.oe2203sp3.x86_64.rpm"
    ],
    "src": [
        "vim-9.0-24.oe2203sp3.src.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-23.oe2003sp4

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-23.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-23.oe2003sp4.aarch64.rpm",
        "vim-common-9.0-23.oe2003sp4.aarch64.rpm",
        "vim-debuginfo-9.0-23.oe2003sp4.aarch64.rpm",
        "vim-debugsource-9.0-23.oe2003sp4.aarch64.rpm",
        "vim-enhanced-9.0-23.oe2003sp4.aarch64.rpm",
        "vim-minimal-9.0-23.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-23.oe2003sp4.x86_64.rpm",
        "vim-common-9.0-23.oe2003sp4.x86_64.rpm",
        "vim-debuginfo-9.0-23.oe2003sp4.x86_64.rpm",
        "vim-debugsource-9.0-23.oe2003sp4.x86_64.rpm",
        "vim-enhanced-9.0-23.oe2003sp4.x86_64.rpm",
        "vim-minimal-9.0-23.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "vim-9.0-23.oe2003sp4.src.rpm"
    ]
}

openEuler:22.03-LTS-SP1 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-24.oe2203sp1

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-24.oe2203sp1.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-24.oe2203sp1.aarch64.rpm",
        "vim-common-9.0-24.oe2203sp1.aarch64.rpm",
        "vim-debuginfo-9.0-24.oe2203sp1.aarch64.rpm",
        "vim-debugsource-9.0-24.oe2203sp1.aarch64.rpm",
        "vim-enhanced-9.0-24.oe2203sp1.aarch64.rpm",
        "vim-minimal-9.0-24.oe2203sp1.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-24.oe2203sp1.x86_64.rpm",
        "vim-common-9.0-24.oe2203sp1.x86_64.rpm",
        "vim-debuginfo-9.0-24.oe2203sp1.x86_64.rpm",
        "vim-debugsource-9.0-24.oe2203sp1.x86_64.rpm",
        "vim-enhanced-9.0-24.oe2203sp1.x86_64.rpm",
        "vim-minimal-9.0-24.oe2203sp1.x86_64.rpm"
    ],
    "src": [
        "vim-9.0-24.oe2203sp1.src.rpm"
    ]
}

openEuler:24.03-LTS / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-8.oe2403

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0.2092-8.oe2403.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-8.oe2403.aarch64.rpm",
        "vim-common-9.0.2092-8.oe2403.aarch64.rpm",
        "vim-debuginfo-9.0.2092-8.oe2403.aarch64.rpm",
        "vim-debugsource-9.0.2092-8.oe2403.aarch64.rpm",
        "vim-enhanced-9.0.2092-8.oe2403.aarch64.rpm",
        "vim-minimal-9.0.2092-8.oe2403.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-8.oe2403.x86_64.rpm",
        "vim-common-9.0.2092-8.oe2403.x86_64.rpm",
        "vim-debuginfo-9.0.2092-8.oe2403.x86_64.rpm",
        "vim-debugsource-9.0.2092-8.oe2403.x86_64.rpm",
        "vim-enhanced-9.0.2092-8.oe2403.x86_64.rpm",
        "vim-minimal-9.0.2092-8.oe2403.x86_64.rpm"
    ],
    "src": [
        "vim-9.0.2092-8.oe2403.src.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-24.oe2203sp4

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-24.oe2203sp4.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-24.oe2203sp4.aarch64.rpm",
        "vim-common-9.0-24.oe2203sp4.aarch64.rpm",
        "vim-debuginfo-9.0-24.oe2203sp4.aarch64.rpm",
        "vim-debugsource-9.0-24.oe2203sp4.aarch64.rpm",
        "vim-enhanced-9.0-24.oe2203sp4.aarch64.rpm",
        "vim-minimal-9.0-24.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-24.oe2203sp4.x86_64.rpm",
        "vim-common-9.0-24.oe2203sp4.x86_64.rpm",
        "vim-debuginfo-9.0-24.oe2203sp4.x86_64.rpm",
        "vim-debugsource-9.0-24.oe2203sp4.x86_64.rpm",
        "vim-enhanced-9.0-24.oe2203sp4.x86_64.rpm",
        "vim-minimal-9.0-24.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "vim-9.0-24.oe2203sp4.src.rpm"
    ]
}