Format: 1.8 Date: Fri, 17 Mar 2023 17:54:05 +0530 Source: vim Binary: vim vim-gtk3 vim-motif vim-nox vim-tiny xxd Built-For-Profiles: noudeb Architecture: i386 i386_translations Version: 2:9.0.0242-1ubuntu1.2 Distribution: kinetic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Nishit Majithia Description: vim - Vi IMproved - enhanced vi editor vim-gtk3 - Vi IMproved - enhanced vi editor - with GTK3 GUI vim-motif - Vi IMproved - enhanced vi editor - with Motif GUI vim-nox - Vi IMproved - enhanced vi editor - with scripting languages suppo vim-tiny - Vi IMproved - enhanced vi editor - compact version xxd - tool to make (or reverse) a hex dump Changes: vim (2:9.0.0242-1ubuntu1.2) kinetic-security; urgency=medium . * SECURITY UPDATE: NULL pointer dereference when creating blank mouse pointer - debian/patches/CVE-2022-47024.patch: only use the return value of XChangeGC() when it is not NULL. - CVE-2022-47024 * SECURITY UPDATE: invalid memory access with bad 'statusline' value - debian/patches/CVE-2023-0049.patch: avoid going over the NULL at the end of a statusline. - CVE-2023-0049 * SECURITY UPDATE: invalid memory access with recursive substitute expression - debian/patches/CVE-2023-0054.patch: check the return value of vim_regsub(). - CVE-2023-0054 * SECURITY UPDATE: invalid memory access with folding and using "L" - debian/patches/CVE-2023-0288.patch: prevent the cursor from moving to line zero. - CVE-2023-0288 * SECURITY UPDATE: reading past the end of a line when formatting text - debian/patches/CVE-2023-0433.patch: check for not going over the end of the line. - CVE-2023-0433 * SECURITY UPDATE: heap based buffer overflow vulnerability - debian/patches/CVE-2023-0051.patch: reading beyond text - debian/patches/CVE-2023-1170.patch: accessing invalid memory with put in Visual block mode - CVE-2023-0051 - CVE-2023-1170 * SECURITY UPDATE: incorrect calculation of buffer size - debian/patches/CVE-2023-1175.patch: illegal memory access when using virtual editing - CVE-2023-1175 * SECURITY UPDATE: NULL pointer dereference vulnerability - debian/patches/CVE-2023-1264.patch: using NULL pointer with nested :open command - CVE-2023-1264 Checksums-Sha1: 8c2f28192ad687af2c6bc2e36f4a40303d7982d0 3529206 vim-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 0de200ee8d929c494d010d08e992b8fc5a2ac07b 3950242 vim-gtk3-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb a50a141139955d3363a554f1f53fc3a8ad7a2aa8 2012952 vim-gtk3_9.0.0242-1ubuntu1.2_i386.deb cfc1d9ca189caf0904ba3e8d2636853fac624d7d 3942734 vim-motif-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 78f9daae6aefb3a36e6df1a30429cfb4ee7d8b06 2005066 vim-motif_9.0.0242-1ubuntu1.2_i386.deb d8b40e3fe1ba23c2be673c94d7ea18c5db52ece5 3663204 vim-nox-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 7cc6f101368edd330568804ea6100d154b13bedd 1864882 vim-nox_9.0.0242-1ubuntu1.2_i386.deb a2b47e9f4bd5677862d20fdd07d83c4df1323a92 1424274 vim-tiny-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb e698f38877a8a08e349fed8e57a399e912607803 723146 vim-tiny_9.0.0242-1ubuntu1.2_i386.deb ed12672bcaf270daf3dcbb33fc91cc6bcbb3347b 19341 vim_9.0.0242-1ubuntu1.2_i386.buildinfo ebd25bf7cddddd5b4dc71ce51e0e603cc08e268b 1707004 vim_9.0.0242-1ubuntu1.2_i386.deb 3fa0b076cff9e8e46f2d448f3a54d990e796471f 14038237 vim_9.0.0242-1ubuntu1.2_i386_translations.tar.gz 8bbf8f3175c3207c570ef6124f54d4d5bf196c99 14264 xxd-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 85aee709fa176760350776b61e214fa6c5b0b5ed 50478 xxd_9.0.0242-1ubuntu1.2_i386.deb Checksums-Sha256: 24410861d0934db2cf791db415ff55ecaacd3b961fc75eb31441270a504daf94 3529206 vim-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 928908e89961aaf0a136f9fffe01c8d513f693cefe5ab3908993e187f9a10c75 3950242 vim-gtk3-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb e09cb417e9f56a9e5cb8c10e97f1ab3a4ce707320611855bd284147c30b74b77 2012952 vim-gtk3_9.0.0242-1ubuntu1.2_i386.deb 25ed7ffae77c7e97ceb660388158b156c97b1fa148d2ea4aed6823d20a72024f 3942734 vim-motif-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 56ce52525c38745e3a4e53902a29bfb140a6d0a52bedc6bbc8daece8d35ea662 2005066 vim-motif_9.0.0242-1ubuntu1.2_i386.deb 5ede023667077588a4e937cd0b2abad2047417dcc39fc659ade6da41044dac44 3663204 vim-nox-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 3ae74275a9e75337a1896a2795fd2003c982495987632113ee815e378a7d7694 1864882 vim-nox_9.0.0242-1ubuntu1.2_i386.deb 336e6fb91374182f84d87f77da0d4ac61595a1c7a457d71fc69a35ff9792840b 1424274 vim-tiny-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb c73b710501609c1db70edeea56b83343971cf53dcd86402edfdaa3b75812fa2d 723146 vim-tiny_9.0.0242-1ubuntu1.2_i386.deb 7fcb2942aa0e32513a11bd24a69adafc0b53fcb11485882a9fb2dbb331c9d3aa 19341 vim_9.0.0242-1ubuntu1.2_i386.buildinfo b353de00dd5360e4849c72b472233c4c4f4ed77a9ca4ccf36fabf118a9ea1116 1707004 vim_9.0.0242-1ubuntu1.2_i386.deb 127868649b42880db11983b849e20ea85e857b2abc45639b059944910044c362 14038237 vim_9.0.0242-1ubuntu1.2_i386_translations.tar.gz 34697ee575ad46d70791fb37f97daf3290007e32d621e675ad3f3bbd4b94d040 14264 xxd-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb e812da46738e4af761c49064695249a6ab3526bd2122c27ded9376ae47290455 50478 xxd_9.0.0242-1ubuntu1.2_i386.deb Files: 64326f14dbc912f046164cdd6ab730d0 3529206 debug optional vim-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 81e05f05fb71b7b8186942bbcfd1449b 3950242 debug optional vim-gtk3-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 53cefa7e31ffff8cce27e67b2491d942 2012952 editors optional vim-gtk3_9.0.0242-1ubuntu1.2_i386.deb 9c2eed12bd065b0c722b72ffb90d7247 3942734 debug optional vim-motif-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb d28aaefc9c74fdf42010e8058785e4ba 2005066 editors optional vim-motif_9.0.0242-1ubuntu1.2_i386.deb e00c11023a784c4bd9fbd04e6bcd83d0 3663204 debug optional vim-nox-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb 29fccfcde8ffd23f9fb15d54ac49bf56 1864882 editors optional vim-nox_9.0.0242-1ubuntu1.2_i386.deb cfe91864fbce7c8c50f246a5621df2dc 1424274 debug optional vim-tiny-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb e055c6773db47b6235e40dcf49442600 723146 editors important vim-tiny_9.0.0242-1ubuntu1.2_i386.deb 6c945bacd96caebf21cf41e1634b5b19 19341 editors optional vim_9.0.0242-1ubuntu1.2_i386.buildinfo e81e5bfa1ffa6964c63d6b086ad40011 1707004 editors optional vim_9.0.0242-1ubuntu1.2_i386.deb ef0811111a42bc0e30dd0c742a6fe305 14038237 raw-translations - vim_9.0.0242-1ubuntu1.2_i386_translations.tar.gz 5243117714c53370fe2c79af1c8b269a 14264 debug optional xxd-dbgsym_9.0.0242-1ubuntu1.2_i386.ddeb a4a74b04dee81b10dfa7cc9233330b0a 50478 editors optional xxd_9.0.0242-1ubuntu1.2_i386.deb Original-Maintainer: Debian Vim Maintainers