Publishing details
Changelog
vim (2:8.2.3995-1ubuntu2.13) jammy-security; urgency=medium
* SECURITY UPDATE: use-after-free vulnerability
- debian/patches/CVE-2023-4733.patch: Verify oldwin pointer after
reset_VIsual() in do_ecmd.
- CVE-2023-4733
* SECURITY UPDATE: integer overflow vulnerability
- debian/patches/CVE-2023-4734.patch: Check for typeval correctly in
f_fullcommand.
- CVE-2023-4734
* SECURITY UPDATE: out of bounds write vulnerability
- debian/patches/CVE-2023-4735.patch: Add check for buffer size to avoid
overflow in do_addsub.
- CVE-2023-4735
* SECURITY UPDATE: use-after-free vulnerability
- debian/patches/CVE-2023-4750.patch: Check buffer is valid before
accessing it.
- CVE-2023-4750
* SECURITY UPDATE: heap based buffer overflow vulnerability
- debian/patches/CVE-2023-4751.patch: Stop Visual mode when using :ball
to avoid illegal memory access.
- CVE-2023-4751
* SECURITY UPDATE: use-after-free vulnerability
- debian/patches/CVE-2023-4752.patch: validate buffer before accessing it
in ins_compl_get_exp.
- CVE-2023-4752
* SECURITY UPDATE: heap based buffer overflow vulnerability
- debian/patches/CVE-2023-4781.patch: Disallow exchanging windows when
textlock is active in vim_regsub_both.
- CVE-2023-4781
* SECURITY UPDATE: heap based buffer overflow vulnerability
- debian/patches/CVE-2023-5344.patch: Add NULL at end of buffer in
trunc_string.
- CVE-2023-5344
* SECURITY UPDATE: NULL pointer dereference
- debian/patches/CVE-2023-5441.patch: skip gui_scroll when exmode_active
in gui_do_scroll.
- CVE-2023-5441
* SECURITY UPDATE: use-after-free vulnerability
- debian/patches/CVE-2023-5535.patch: block autocommands in
buf_contents_changed.
- CVE-2023-5535
-- Fabian Toepfer <email address hidden> Mon, 16 Oct 2023 20:15:38 +0200
Builds
Built packages
-
vim
Vi IMproved - enhanced vi editor
-
vim-athena
Vi IMproved - enhanced vi editor - with Athena GUI
-
vim-athena-dbgsym
debug symbols for vim-athena
-
vim-common
Vi IMproved - Common files
-
vim-dbgsym
debug symbols for vim
-
vim-doc
Vi IMproved - HTML documentation
-
vim-gtk
Vi IMproved - enhanced vi editor (dummy package)
-
vim-gtk3
Vi IMproved - enhanced vi editor - with GTK3 GUI
-
vim-gtk3-dbgsym
debug symbols for vim-gtk3
-
vim-gui-common
Vi IMproved - Common GUI files
-
vim-nox
Vi IMproved - enhanced vi editor - with scripting languages support
-
vim-nox-dbgsym
debug symbols for vim-nox
-
vim-runtime
Vi IMproved - Runtime files
-
vim-tiny
Vi IMproved - enhanced vi editor - compact version
-
vim-tiny-dbgsym
debug symbols for vim-tiny
-
xxd
tool to make (or reverse) a hex dump
-
xxd-dbgsym
debug symbols for xxd
Package files