OESA-2024-2026

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-2026
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2024-2026.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2024-2026
Upstream
Published
2024-08-23T11:08:53Z
Modified
2025-08-12T05:45:16.358639Z
Summary
vim security update
Details

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this triggers Buf* autocommands. If in such an autocommand the buffer that was just opened is closed (including the window where it is shown), this causes the window structure to be freed which contains a reference to the argument list that we are actually modifying. Once the autocommands are completed, the references to the window and argument list are no longer valid and as such cause an use-after-free. Impact is low since the user must either intentionally add some unusual autocommands that wipe a buffer during creation (either manually or by sourcing a malicious plugin), but it will crash Vim. The issue has been fixed as of Vim patch v9.1.0678.(CVE-2024-43374)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:22.03-LTS-SP1 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-25.oe2203sp1

Ecosystem specific 

{
    "src": [
        "vim-9.0-25.oe2203sp1.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-25.oe2203sp1.x86_64.rpm",
        "vim-common-9.0-25.oe2203sp1.x86_64.rpm",
        "vim-debuginfo-9.0-25.oe2203sp1.x86_64.rpm",
        "vim-debugsource-9.0-25.oe2203sp1.x86_64.rpm",
        "vim-enhanced-9.0-25.oe2203sp1.x86_64.rpm",
        "vim-minimal-9.0-25.oe2203sp1.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-25.oe2203sp1.aarch64.rpm",
        "vim-common-9.0-25.oe2203sp1.aarch64.rpm",
        "vim-debuginfo-9.0-25.oe2203sp1.aarch64.rpm",
        "vim-debugsource-9.0-25.oe2203sp1.aarch64.rpm",
        "vim-enhanced-9.0-25.oe2203sp1.aarch64.rpm",
        "vim-minimal-9.0-25.oe2203sp1.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0-25.oe2203sp1.noarch.rpm"
    ]
}

openEuler:24.03-LTS / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-10.oe2403

Ecosystem specific 

{
    "src": [
        "vim-9.0.2092-10.oe2403.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-10.oe2403.x86_64.rpm",
        "vim-common-9.0.2092-10.oe2403.x86_64.rpm",
        "vim-debuginfo-9.0.2092-10.oe2403.x86_64.rpm",
        "vim-debugsource-9.0.2092-10.oe2403.x86_64.rpm",
        "vim-enhanced-9.0.2092-10.oe2403.x86_64.rpm",
        "vim-minimal-9.0.2092-10.oe2403.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-10.oe2403.aarch64.rpm",
        "vim-common-9.0.2092-10.oe2403.aarch64.rpm",
        "vim-debuginfo-9.0.2092-10.oe2403.aarch64.rpm",
        "vim-debugsource-9.0.2092-10.oe2403.aarch64.rpm",
        "vim-enhanced-9.0.2092-10.oe2403.aarch64.rpm",
        "vim-minimal-9.0.2092-10.oe2403.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0.2092-10.oe2403.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-25.oe2203sp4

Ecosystem specific 

{
    "src": [
        "vim-9.0-25.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-25.oe2203sp4.x86_64.rpm",
        "vim-common-9.0-25.oe2203sp4.x86_64.rpm",
        "vim-debuginfo-9.0-25.oe2203sp4.x86_64.rpm",
        "vim-debugsource-9.0-25.oe2203sp4.x86_64.rpm",
        "vim-enhanced-9.0-25.oe2203sp4.x86_64.rpm",
        "vim-minimal-9.0-25.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-25.oe2203sp4.aarch64.rpm",
        "vim-common-9.0-25.oe2203sp4.aarch64.rpm",
        "vim-debuginfo-9.0-25.oe2203sp4.aarch64.rpm",
        "vim-debugsource-9.0-25.oe2203sp4.aarch64.rpm",
        "vim-enhanced-9.0-25.oe2203sp4.aarch64.rpm",
        "vim-minimal-9.0-25.oe2203sp4.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0-25.oe2203sp4.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-25.oe2203sp3

Ecosystem specific 

{
    "src": [
        "vim-9.0-25.oe2203sp3.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-25.oe2203sp3.x86_64.rpm",
        "vim-common-9.0-25.oe2203sp3.x86_64.rpm",
        "vim-debuginfo-9.0-25.oe2203sp3.x86_64.rpm",
        "vim-debugsource-9.0-25.oe2203sp3.x86_64.rpm",
        "vim-enhanced-9.0-25.oe2203sp3.x86_64.rpm",
        "vim-minimal-9.0-25.oe2203sp3.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-25.oe2203sp3.aarch64.rpm",
        "vim-common-9.0-25.oe2203sp3.aarch64.rpm",
        "vim-debuginfo-9.0-25.oe2203sp3.aarch64.rpm",
        "vim-debugsource-9.0-25.oe2203sp3.aarch64.rpm",
        "vim-enhanced-9.0-25.oe2203sp3.aarch64.rpm",
        "vim-minimal-9.0-25.oe2203sp3.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0-25.oe2203sp3.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-24.oe2003sp4

Ecosystem specific 

{
    "src": [
        "vim-9.0-24.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-24.oe2003sp4.x86_64.rpm",
        "vim-common-9.0-24.oe2003sp4.x86_64.rpm",
        "vim-debuginfo-9.0-24.oe2003sp4.x86_64.rpm",
        "vim-debugsource-9.0-24.oe2003sp4.x86_64.rpm",
        "vim-enhanced-9.0-24.oe2003sp4.x86_64.rpm",
        "vim-minimal-9.0-24.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-24.oe2003sp4.aarch64.rpm",
        "vim-common-9.0-24.oe2003sp4.aarch64.rpm",
        "vim-debuginfo-9.0-24.oe2003sp4.aarch64.rpm",
        "vim-debugsource-9.0-24.oe2003sp4.aarch64.rpm",
        "vim-enhanced-9.0-24.oe2003sp4.aarch64.rpm",
        "vim-minimal-9.0-24.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0-24.oe2003sp4.noarch.rpm"
    ]
}