SUSE-CU-2023:2155-1: Security update of suse/sle-micro/5.4/toolbox

[sle-security-updates at lists.suse.com]

SUSE Container Update Advisory: suse/sle-micro/5.4/toolbox
-----------------------------------------------------------------
Container Advisory ID : SUSE-CU-2023:2155-1
Container Tags        : suse/sle-micro/5.4/toolbox:12.1 , suse/sle-micro/5.4/toolbox:12.1-4.2.54 , suse/sle-micro/5.4/toolbox:latest
Container Release     : 4.2.54
Severity              : moderate
Type                  : security
References            : 1210996 1211256 1211257 CVE-2023-2426 CVE-2023-2609 CVE-2023-2610
-----------------------------------------------------------------

The container suse/sle-micro/5.4/toolbox was updated. The following patches have been included in this update:

-----------------------------------------------------------------
Advisory ID: SUSE-SU-2023:2640-1
Released:    Mon Jun 26 15:09:10 2023
Summary:     Security update for vim
Type:        security
Severity:    moderate
References:  1210996,1211256,1211257,CVE-2023-2426,CVE-2023-2609,CVE-2023-2610
This update for vim fixes the following issues:

- CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996).
- CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256).
- CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).


The following package changes have been done:

- vim-data-common-9.0.1572-150000.5.46.1 updated
- vim-9.0.1572-150000.5.46.1 updated
- xxd-9.0.1443-150000.5.43.1 removed