UbuntuUpdates.org

Package "vim"

Name: vim

Description:

Vi IMproved - enhanced vi editor
Latest version: 2:9.1.0016-1ubuntu7.2
Release: noble (24.04)
Level: security
Repository: main
Homepage: https://www.vim.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "vim"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "vim" in Noble

Repository Area Version
base universe 2:9.1.0016-1ubuntu7
base main 2:9.1.0016-1ubuntu7
security universe 2:9.1.0016-1ubuntu7.2
updates main 2:9.1.0016-1ubuntu7.2
updates universe 2:9.1.0016-1ubuntu7.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2:9.1.0016-1ubuntu7.2 2024-09-05 04:07:09 UTC

  vim (2:9.1.0016-1ubuntu7.2) noble-security; urgency=medium

  * SECURITY UPDATE: use after free
    - debian/patches/CVE-2024-41957.patch: set tagname to NULL
      after being freed
    - CVE-2024-41957
  * SECURITY UPDATE: use after free
    - debian/patches/CVE-2024-43374.patch: add lock to keep
      reference valid
    - CVE-2024-43374

 -- Bruce Cable <email address hidden> Tue, 27 Aug 2024 14:08:09 +1000
CVE-2024-41957 Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack
CVE-2024-43374 The UNIX editor Vim prior to version 9.1.0678 has a use-after-free error in argument list handling. When adding a new file to the argument list, this


About   -   Send Feedback to @ubuntu_updates