CLSA-2026-1779183235
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1779183235.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2026-1779183235
- Upstream
- Published
- 2026-05-19T09:34:00Z
- Modified
- 2026-05-27T11:33:36.412296261Z
- Summary
- vim: Fix of 6 CVEs
- Details
-
- CVE-2021-4069: copy mlgetcurline() in exopen() so a flushed line buffer is not used after vimregexec()
- CVE-2022-2000: truncate IObuff with "..." in append_command() when remaining space is below threshold
- CVE-2022-3099: guard docmdline() breakpoint lookup with linesga.galen > currentline check
- CVE-2022-1968: introduce getlineandcopy() in findpatterninpath() so mark-based regex cannot invalidate the line
- CVE-2022-0443: cache bufvalid() in setcurbuf() and fall back to lastbuf when buffer was wiped out
- CVE-2022-1735: add checkvisualpos() and call it after every change/stop_insert so VIsual mark is clamped
- References
Affected packages
TuxCare:CentOS:8.5 / vim-X11
Package
- Name
- vim-X11
- Purl
- pkg:rpm/tuxcare/vim-X11?distro=centos-8.5
TuxCare:CentOS:8.5 / vim-common
Package
- Name
- vim-common
- Purl
- pkg:rpm/tuxcare/vim-common?distro=centos-8.5
TuxCare:CentOS:8.5 / vim-enhanced
Package
- Name
- vim-enhanced
- Purl
- pkg:rpm/tuxcare/vim-enhanced?distro=centos-8.5
TuxCare:CentOS:8.5 / vim-filesystem
Package
- Name
- vim-filesystem
- Purl
- pkg:rpm/tuxcare/vim-filesystem?distro=centos-8.5