{"id":"CLSA-2026-1778008248","summary":"vim: Fix of 5 CVEs","details":"- CVE-2022-2125: fix out-of-bounds read in get_lisp_indent(); break out\n  of the inner loop on NUL byte (indent.c, upstream patch 8.2.5122)\n- CVE-2021-3974: fix use-after-free in nfa_regmatch() when a substitute\n  callback frees the regline during a mark comparison; save col and\n  re-fetch rex.line via reg_getline() after getmark_buf() (regexp.c +\n  regexp_nfa.c, upstream patch 8.2.3612)\n- CVE-2022-2206: fix OOB read after terminal resize lowers Rows below\n  cmdline_row / msg_row; clamp both to Rows - 1 in check_shellsize()\n  (term.c, upstream patch 8.2.5160)\n- CVE-2022-2946: fix use-after-free in do_tag() when 'tagfunc' deletes\n  the buffer; make a vim_strsave copy of the tagstack tagname before\n  calling user code (tag.c, upstream patch 9.0.0246)\n- CVE-2022-2286: fix heap-buffer-overflow in the Ctrl-E completion-stop\n  path when the completion leader shrinks below the original text;\n  bounds-check compl_len against replacement string length before\n  ins_bytes_len() (insexpand.c, upstream patch 9.0.0020)","modified":"2026-05-27T11:32:51.701541352Z","published":"2026-05-05T19:47:14Z","upstream":["CVE-2021-3974","CVE-2022-2125","CVE-2022-2206","CVE-2022-2286","CVE-2022-2946"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778008248.html"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-X11?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778008248.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-common?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778008248.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778008248.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778008248.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-minimal?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778008248.json"}}],"schema_version":"1.7.5"}