[USN-5507-1] Vim vulnerabilities


========================================================================== Ubuntu Security Notice USN-5507-1 July 08, 2022
vim vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
– Ubuntu 16.04 ESM
Summary:
Several security issues were fixed in Vim.
Software Description: – vim: Vi IMproved – enhanced vi editor
Details:
It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the program to crash, use unexpected values, or execute arbitrary code. (CVE-2022-1968)
It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive information, a crash, or arbitrary code execution. (CVE-2022-1897, CVE-2022-1942)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04 ESM: vim 2:7.4.1689-3ubuntu1.5+esm10
In general, a standard system update will make all the necessary changes.
References: ubuntu.com/security/notices/USN-5507-1 CVE-2022-1897, CVE-2022-1942, CVE-2022-1968