[ubuntu/bionic-security] vim 2:8.0.1453-1ubuntu1.7 (Accepted)

[Spyros Seimenis]

vim (2:8.0.1453-1ubuntu1.7) bionic-security; urgency=medium

  * SECURITY UPDATE: Fix heap-based buffer overflow when scrolling without a
    valid screen
    - debian/patches/CVE-2021-3903.patch: Do not set VALID_BOTLINE in w_valid
      in src/move.c, src/testdir/test_normal.vim.
    - CVE-2021-3903
  * SECURITY UPDATE: Fix heap-based buffer overflow when reading character
    past end of line
    - debian/patches/CVE-2021-3927.patch: Correct the cursor column in
      src/ex_docmd.c, src/testdir/test_put.vim.
    - CVE-2021-3927
  * SECURITY UPDATE: Fix stack-based buffer overflow when reading
    uninitialized memory when giving spell suggestions
    - debian/patches/CVE-2021-3928.patch: Check that preword is not empty in
      src/spell.c, src/testdir/test_spell.vim.
    - CVE-2021-3928

Date: 2021-11-11 14:39:15.242418+00:00
Changed-By: Spyros Seimenis <spyros.seimenis at canonical.com>
https://launchpad.net/ubuntu/+source/vim/2:8.0.1453-1ubuntu1.7
-------------- next part --------------
Sorry, changesfile not available.