Ubuntu
vim package

vim 2:8.2.2434-1ubuntu1.2 source package in Ubuntu

Changelog

vim (2:8.2.2434-1ubuntu1.2) hirsute-security; urgency=medium

  * SECURITY UPDATE: Fix heap-based buffer overflow when buffer name is very
    long
    - debian/patches/CVE-2021-3872.patch: Make sure not to go over the end of
      the buffer in src/drawscreen.c, src/testdir/test_statusline.vim.
    - CVE-2021-3872
  * SECURITY UPDATE: Fix heap-based buffer overflow when scrolling without a
    valid screen
    - debian/patches/CVE-2021-3903.patch: Do not set VALID_BOTLINE in w_valid
      in src/move.c, src/testdir/test_normal.vim.
    - CVE-2021-3903
  * SECURITY UPDATE: Fix heap-based buffer overflow when reading character
    past end of line
    - debian/patches/CVE-2021-3927.patch: Correct the cursor column in
      src/ex_docmd.c, src/testdir/test_put.vim.
    - CVE-2021-3927
  * SECURITY UPDATE: Fix stack-based buffer overflow when reading
    uninitialized memory when giving spell suggestions
    - debian/patches/CVE-2021-3928.patch: Check that preword is not empty in
      src/spellsuggest.c, src/testdir/test_spell.vim.
    - CVE-2021-3928
  * Fix flaky vim terminal mode test

 -- Spyros Seimenis <email address hidden>  Mon, 08 Nov 2021 15:19:29 +0100

Upload details

Uploaded by:
Spyros Seimenis
Uploaded to:
Hirsute
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
editors
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
vim_8.2.2434.orig.tar.gz 14.7 MiB dec2f91bb4f877b2bfdf283ccc3d94f99f436a225bd8a9b5e3d422f95c56d702
vim_8.2.2434-1ubuntu1.2.debian.tar.xz 209.2 KiB d8ec88dbf5da32b4adfa184251d4c0e555d09ab6511a5fd8e613fc2963c6eb1f
vim_8.2.2434-1ubuntu1.2.dsc 2.6 KiB 607cc89bd0f35500e3ab411dc2ae8aac68fb13f2aa49954035577e51ee88d0e6

View changes file

Binary packages built by this source

vim: No summary available for vim in ubuntu hirsute.

No description available for vim in ubuntu hirsute.

vim-athena: No summary available for vim-athena in ubuntu hirsute.

No description available for vim-athena in ubuntu hirsute.

vim-athena-dbgsym: No summary available for vim-athena-dbgsym in ubuntu hirsute.

No description available for vim-athena-dbgsym in ubuntu hirsute.

vim-common: No summary available for vim-common in ubuntu hirsute.

No description available for vim-common in ubuntu hirsute.

vim-dbgsym: No summary available for vim-dbgsym in ubuntu hirsute.

No description available for vim-dbgsym in ubuntu hirsute.

vim-doc: No summary available for vim-doc in ubuntu hirsute.

No description available for vim-doc in ubuntu hirsute.

vim-gtk: No summary available for vim-gtk in ubuntu hirsute.

No description available for vim-gtk in ubuntu hirsute.

vim-gtk3: No summary available for vim-gtk3 in ubuntu hirsute.

No description available for vim-gtk3 in ubuntu hirsute.

vim-gtk3-dbgsym: No summary available for vim-gtk3-dbgsym in ubuntu hirsute.

No description available for vim-gtk3-dbgsym in ubuntu hirsute.

vim-gui-common: No summary available for vim-gui-common in ubuntu hirsute.

No description available for vim-gui-common in ubuntu hirsute.

vim-nox: No summary available for vim-nox in ubuntu hirsute.

No description available for vim-nox in ubuntu hirsute.

vim-nox-dbgsym: No summary available for vim-nox-dbgsym in ubuntu hirsute.

No description available for vim-nox-dbgsym in ubuntu hirsute.

vim-runtime: No summary available for vim-runtime in ubuntu hirsute.

No description available for vim-runtime in ubuntu hirsute.

vim-tiny: No summary available for vim-tiny in ubuntu hirsute.

No description available for vim-tiny in ubuntu hirsute.

vim-tiny-dbgsym: No summary available for vim-tiny-dbgsym in ubuntu hirsute.

No description available for vim-tiny-dbgsym in ubuntu hirsute.

xxd: No summary available for xxd in ubuntu hirsute.

No description available for xxd in ubuntu hirsute.

xxd-dbgsym: No summary available for xxd-dbgsym in ubuntu hirsute.

No description available for xxd-dbgsym in ubuntu hirsute.