ELA-616-1 vim security update

buffer overflows

2022-05-18
Packagevim
Version2:7.4.488-7+deb8u6
Related CVEs CVE-2022-0261 CVE-2022-0351 CVE-2022-0413 CVE-2022-0443 CVE-2022-0572 CVE-2022-1154 CVE-2022-1616 CVE-2022-1619 CVE-2022-1621 CVE-2022-1720


Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and use-after-free may lead to a denial-of-service (application crash) or other unspecified impact.



For Debian 8 jessie, these problems have been fixed in version 2:7.4.488-7+deb8u6.

We recommend that you upgrade your vim packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.