vim (Vi IMproved) : security update to 9.1.0404

[MingcongBai]

Affected package (and version)

vim <= 9.1.0403

CVE ID(s)

N/A

Severity

Low

Other security advisory ID(s）

N/A

Description/References

When outputting colored hexdumps using the -R command line flag,
together with -g1 (group every byte), -c 256 (format 256 octets per
line), -d (show offsets in decimal) and -o <large_numer> (add offset to
the file position), the buffer used to write to may overflow.

Impact is low since the user must intentionally execute xxd with several
non-default flags, but it may cause a crash of xxd.

Patch(es)/Solution(s)

Update.

[MingcongBai]

Not yet released at the time of writing.