Ubuntu alert USN-7261-2 (vim)

From:
             
 
"Leonidas S. Barbosa" <leo.barbosa@canonical.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-7261-2] Vim vulnerability
Date:
             
 
Wed, 02 Apr 2025 05:40:07 -0300
Message-ID:
             
 
<20250402084007.GA3290183@d4rkl41n>
==========================================================================
Ubuntu Security Notice USN-7261-2
April 01, 2025

vim vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Vim could be made crash.

Software Description:
- vim: Vi IMproved - enhanced vi editor

Details:

USN-7261-1 fixed vulnerabilities in Vim. This update provides
the corresponding updates for Ubuntu 24.04 LTS.

Original advisory details:

 It was discovered that Vim incorrectly handled certain internal calls
 when scrolling a window. An attacker could possibly use this issue to
 cause a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
  vim                             2:9.1.0016-1ubuntu7.7

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-7261-2
  https://ubuntu.com/security/notices/USN-7261-1
  CVE-2025-24014

Package Information:
  https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubun...



Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEf+ebRFcoyOoAQoOeRbznW4QLH2kFAmfs9+MACgkQRbznW4QL
H2kZHA//brc+sxYZxoDK9tfuYiRGG/Zrt/TJEbPZTjWyrznT3YYBWQUoOeSrE3Sq
RCr72I3pL9k1rof5QXLeg84fqGxM9xmuO9XLBeFb/viZ2SSKkIG6ofHDjm8kkZv0
d0I3EfIs/FyM6UYLVh3Dkc7chHH0Tqiv7ruheYBE456HjLUCew6nfxomopAsOJzH
swx2ZykFvzMEn/OA0NtF43ch3wXNwI0TpZlEdugsy4hjBlH0uIi27U0gP0FS0D+u
ZLdrqX90favmQynsBbh3IA+n23/Be0s3cBaFYIexTWswdgPzKZ94VD5dgDMlXfUt
pwpNw7+1Gt0s3zptPHLHR2nvRGFHyv4QKF3tr2mDAAgQzatKYMfjvFc49l+0l+aT
FRIYnIqo3igsuPaYILz/iPoun6+tmSSbq/4PluY77+J37cmTF2u2cBGybe0MdffS
k5SRn7pKi4zplahSD84pHIp8irVZNrIQxrNQgntWN5ydV7yCSfU0Hpbclanwi0tN
7AyJYQM+2LyMU8MAuAFDZagAvjswY1qFl7T/oog0Zcjv81F6pVYrkes6SVTXUspc
XrXWjZlDWz4RTJzIRmdwM5154YHQk5ddX9gfc5q1tXO6bkyDKK4rUfCQqtPuIC2+
Ec3623lim+21n6QiOJqWEzGkNt8OUdAkNCbzbhXof6VTyBiE7G8=
=rVO+
-----END PGP SIGNATURE-----


Attachment: None (type=text/plain)