USN-5516-1: Vim vulnerabilities
13 July 2022
Several security issues were fixed in Vim.
Releases
Packages
- vim - Vi IMproved - enhanced vi editor
Details
It was discovered that Vim incorrectly handled memory access. An attacker
could potentially use this issue to cause the corruption of sensitive
information, a crash, or arbitrary code execution.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
vim
-
2:7.4.1689-3ubuntu1.5+esm11
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-6270-1: vim-gtk-py2, xxd, vim-gtk3, vim, vim-gtk, vim-athena, vim-doc, vim-common, vim-gnome-py2, vim-gnome, vim-gui-common, vim-runtime, vim-lesstif, vim-tiny, vim-nox, vim-gtk3-py2, vim-athena-py2, vim-nox-py2
- USN-6557-1: vim-gtk-py2, vim-gnome, vim-runtime, vim-lesstif, vim-motif, vim-gtk3-py2, vim, vim-gtk, vim-common, vim-gnome-py2, vim-tiny, vim-nox, vim-athena-py2, xxd, vim-gtk3, vim-doc, vim-nox-py2, vim-athena, vim-gui-common
- USN-6026-1: xxd, vim-gtk3, vim, vim-gtk, vim-athena, vim-doc, vim-common, vim-gnome, vim-gui-common, vim-runtime, vim-lesstif, vim-tiny, vim-nox