USN-5516-1: Vim vulnerabilities

Releases

• Ubuntu 16.04 ESM

Packages

• vim - Vi IMproved - enhanced vi editor

Details

It was discovered that Vim incorrectly handled memory access. An attacker
could potentially use this issue to cause the corruption of sensitive
information, a crash, or arbitrary code execution.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04

• vim - 2:7.4.1689-3ubuntu1.5+esm11
  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

• CVE-2022-2210
• CVE-2022-2000
• CVE-2022-2207

Related notices

• USN-6270-1: vim-gtk3-py2, xxd, vim-runtime, vim-tiny, vim, vim-common, vim-gtk3, vim-gtk-py2, vim-nox, vim-athena-py2, vim-doc, vim-athena, vim-gtk, vim-gnome-py2, vim-gnome, vim-lesstif, vim-gui-common, vim-nox-py2
• USN-6557-1: vim-motif, vim-doc, vim-gnome-py2, vim-gnome, xxd, vim-tiny, vim-gtk-py2, vim-gtk3, vim-runtime, vim-athena-py2, vim-gtk, vim-lesstif, vim-nox-py2, vim-gtk3-py2, vim, vim-common, vim-nox, vim-athena, vim-gui-common
• USN-6026-1: xxd, vim-runtime, vim-tiny, vim, vim-common, vim-nox, vim-doc, vim-athena, vim-gtk, vim-gtk3, vim-gnome, vim-lesstif, vim-gui-common