Linux · Security advisory · November 12, 2024

RHSA-2024:9405: Security update for 5 packages

RHSA-2024:9405, released November 12, 2024, fixes 1 CVE across 5 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0065

51st percentile

Fixed package versions

Product	Release	Fixed in
vim-X11	RHEL 9	2:8.2.2637-21.el9
vim-common	RHEL 9	2:8.2.2637-21.el9
vim-enhanced	RHEL 9	2:8.2.2637-21.el9
vim-filesystem	RHEL 9	2:8.2.2637-21.el9
vim-minimal	RHEL 9	2:8.2.2637-21.el9

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2021-3903	xxd: vim is vulnerable to Heap-based Buffer Overflow		5.5	0.0065	None reported

Also fixes CVE-2021-3903

ALAS2023-2023-098
vim-common, vim-common-debuginfo, vim-data and 8 more on amzn 2023
vim 2:8.2.3565-1ubuntu2
vim on Ubuntu 22.04.1 LTS (jammy)
vim-athena 2:8.2.3565-1ubuntu2
vim-athena on Ubuntu 22.04.1 LTS (jammy)
vim-common 2:8.2.3565-1ubuntu2
vim-common on Ubuntu 22.04.1 LTS (jammy)
vim-gtk 2:8.2.3565-1ubuntu2
vim-gtk on Ubuntu 22.04.1 LTS (jammy)
vim-gtk3 2:8.2.3565-1ubuntu2
vim-gtk3 on Ubuntu 22.04.1 LTS (jammy)
vim-gui-common 2:8.2.3565-1ubuntu2
vim-gui-common on Ubuntu 22.04.1 LTS (jammy)
vim-nox 2:8.2.3565-1ubuntu2
vim-nox on Ubuntu 22.04.1 LTS (jammy)

Vendor advisory

https://access.redhat.com/errata/RHSA-2024:9405

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo