USN-5516-1: Vim vulnerabilities
13 July 2022
Several security issues were fixed in Vim.
Releases
Packages
- vim - Vi IMproved - enhanced vi editor
Details
It was discovered that Vim incorrectly handled memory access. An attacker
could potentially use this issue to cause the corruption of sensitive
information, a crash, or arbitrary code execution.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
vim
-
2:7.4.1689-3ubuntu1.5+esm11
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6270-1: vim, vim-gnome, vim-common, vim-athena-py2, vim-doc, vim-gtk, vim-gtk3, vim-gnome-py2, vim-tiny, vim-nox, vim-gtk-py2, vim-nox-py2, xxd, vim-lesstif, vim-gtk3-py2, vim-gui-common, vim-runtime, vim-athena
- USN-6557-1: vim-gtk3, vim-doc, vim-gtk-py2, vim-nox-py2, xxd, vim-gtk, vim-gnome, vim-athena-py2, vim-nox, vim-common, vim-tiny, vim-gnome-py2, vim-motif, vim-lesstif, vim-gtk3-py2, vim-gui-common, vim, vim-runtime, vim-athena
- USN-6026-1: vim, vim-gnome, vim-common, vim-doc, vim-gtk, vim-gtk3, vim-tiny, vim-nox, xxd, vim-lesstif, vim-gui-common, vim-runtime, vim-athena