A vim security update has been released for Debian GNU/Linux 8 Extended LTS to address multiple security vulnerabilities.

ELA-616-1 vim security update

Package vim
Version 2:7.4.488-7+deb8u6
Related CVEs CVE-2022-0261 CVE-2022-0351 CVE-2022-0413 CVE-2022-0443 CVE-2022-0572 CVE-2022-1154 CVE-2022-1616 CVE-2022-1619 CVE-2022-1621 CVE-2022-1720

Multiple security vulnerabilities have been discovered in vim, an enhanced vi editor. Buffer overflows, out-of-bounds reads and use-after-free may lead to a denial-of-service (application crash) or other unspecified impact.

For Debian 8 jessie, these problems have been fixed in version 2:7.4.488-7+deb8u6.

We recommend that you upgrade your vim packages.

Further information about Extended LTS security advisories can be found at: https://deb.freexian.com/extended-lts/

  ELA-616-1 vim security update