Ubuntu
vim package

vim 2:8.2.3995-1ubuntu2.12 source package in Ubuntu

Changelog

vim (2:8.2.3995-1ubuntu2.12) jammy-security; urgency=medium

  * SECURITY UPDATE: heap-based buffer overflow
    - debian/patches/CVE-2022-3234.patch: Check for replacing NUL after Tab.
    - debian/patches/CVE-2022-3491.patch: Do not return an invalid pointer.
      Fix skipping redirection
    - debian/patches/CVE-2022-3520.patch: Check that the column does not
      become negative.
    - CVE-2022-3234
    - CVE-2022-3491
    - CVE-2022-3520
  * SECURITY UPDATE: use after free memory issue
    - debian/patches/CVE-2022-3235.patch: Make sure pointer to b_p_iminsert
      is still valid.
    - debian/patches/CVE-2022-3256.patch: Copy the mark before editing
      another buffer
    - debian/patches/CVE-2022-3297.patch: Make a copy of the option. Make
      sure cursor position is valid
    - debian/patches/CVE-2022-3352.patch: Disallow deleting the current
      buffer to avoid using freed memory
    - debian/patches/CVE-2022-3591.patch: Disallow navigating to a dummy
      buffer
    - debian/patches/CVE-2022-3705.patch: Set the quickfix-busy flag while
      filling the buffer
    - debian/patches/CVE-2022-4292.patch: Bail out if the window no longer
      exists.
    - CVE-2022-3235
    - CVE-2022-3256
    - CVE-2022-3297
    - CVE-2022-3352
    - CVE-2022-3591
    - CVE-2022-3705
    - CVE-2022-4292
  * SECURITY UPDATE: NULL pointer dereference
    - debian/patches/CVE-2022-3278.patch: Don't get a next line when
      skipping over NL
    - CVE-2022-3278
  * SECURITY UPDATE: stack-based buffer overflow
    - debian/patches/CVE-2022-3324.patch: Make sure the window width does
      not become negative
    - CVE-2022-3324
  * SECURITY UPDATE: incorrect floating point comparison
    - debian/patches/CVE-2022-4293.patch: fix floating point comparison
    - CVE-2022-4293
  * debian/patches/fix_flaky_tests.patch: fix some flaky tests

 -- Nishit Majithia <email address hidden>  Fri, 06 Oct 2023 13:19:43 +0530

Upload details

Uploaded by:
Nishit Majithia
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
editors
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
vim_8.2.3995.orig.tar.xz 9.9 MiB a9d4993d94a212c1e284fe19d7127508dc9c911cddaf91f2a6f72d0b9b71b8ce
vim_8.2.3995-1ubuntu2.12.debian.tar.xz 279.7 KiB 66bc4306b91a4f9629f13a6a120b0b74977b7f8dc812fd2f830e0490caacfb04
vim_8.2.3995-1ubuntu2.12.dsc 2.8 KiB 606c2ad31660f2f28770f38418f442495c1a1edc0c96fc9e01d7abb883741f55

View changes file

Binary packages built by this source

vim: Vi IMproved - enhanced vi editor

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 Many new features have been added: multi level undo, syntax
 highlighting, command line history, on-line help, filename
 completion, block operations, folding, Unicode support, etc.
 .
 This package contains a version of vim compiled with a rather
 standard set of features. This package does not provide a GUI
 version of Vim. See the other vim-* packages if you need more
 (or less).

vim-athena: Vi IMproved - enhanced vi editor - with Athena GUI

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 Many new features have been added: multi level undo, syntax
 highlighting, command line history, on-line help, filename
 completion, block operations, folding, Unicode support, etc.
 .
 This package contains a version of vim compiled with a Athena GUI
 and support for scripting with Lua, Perl, Python 3, and Tcl.

vim-athena-dbgsym: debug symbols for vim-athena
vim-common: Vi IMproved - Common files

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 This package contains files shared by all non GUI-enabled vim variants
 available in Debian. Examples of such shared files are: manpages and
 configuration files.

vim-dbgsym: debug symbols for vim
vim-doc: Vi IMproved - HTML documentation

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 This package contains the HTML version of the online documentation. It is
 built from the runtime/doc directory of the source tree.

vim-gtk: Vi IMproved - enhanced vi editor (dummy package)

 This is a transitional package to install the vim-gtk3 package. You may
 remove this package if nothing depends on it.

vim-gtk3: Vi IMproved - enhanced vi editor - with GTK3 GUI

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 Many new features have been added: multi level undo, syntax
 highlighting, command line history, on-line help, filename
 completion, block operations, folding, Unicode support, etc.
 .
 This package contains a version of vim compiled with a GTK3 GUI
 and support for scripting with Lua, Perl, Python 3, Ruby, and Tcl.

vim-gtk3-dbgsym: debug symbols for vim-gtk3
vim-gui-common: Vi IMproved - Common GUI files

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 This package contains files shared by all GUI-enabled vim
 variants available in Debian. Examples of such shared files are:
 gvimtutor, icons, and desktop environments settings.

vim-nox: Vi IMproved - enhanced vi editor - with scripting languages support

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 Many new features have been added: multi level undo, syntax
 highlighting, command line history, on-line help, filename
 completion, block operations, folding, Unicode support, etc.
 .
 This package contains a version of vim compiled with support for
 scripting with Lua, Perl, Python 3, Ruby, and Tcl but no GUI.

vim-nox-dbgsym: debug symbols for vim-nox
vim-runtime: Vi IMproved - Runtime files

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 This package contains vimtutor and the architecture independent runtime
 files, used, if available, by all vim variants available in Debian.
 Example of such runtime files are: online documentation, rules for
 language-specific syntax highlighting and indentation, color schemes,
 and standard plugins.

vim-tiny: Vi IMproved - enhanced vi editor - compact version

 Vim is an almost compatible version of the UNIX editor Vi.
 .
 This package contains a minimal version of Vim compiled with no GUI and
 a small subset of features. This package's sole purpose is to provide
 the vi binary for base installations.
 .
 If a vim binary is wanted, try one of the following more featureful
 packages: vim, vim-nox, vim-athena, or vim-gtk3.

vim-tiny-dbgsym: debug symbols for vim-tiny
xxd: tool to make (or reverse) a hex dump

 xxd creates a hex dump of a given file or standard input. It can also convert
 a hex dump back to its original binary form.

xxd-dbgsym: debug symbols for xxd