{"id":"CLSA-2026-1779214181","summary":"vim: Fix of 4 CVEs","details":"- CVE-2022-3278: fix crash when using NUL in buffer that uses :source;\n  don't get a next line when skipping over NL in eval_next_non_blank()\n  (eval.c, upstream patch 9.0.0552)\n- CVE-2023-48234: fix overflow when getting count for normal z command;\n  break out of nv_zet() count loop when n \u003e LONG_MAX/10 (normal.c,\n  upstream patch 9.0.2109)\n- CVE-2023-48236: fix overflow in get_number() when using z= with a\n  large count; return 0 when n \u003e INT_MAX/10 (misc1.c, upstream patch\n  9.0.2111)\n- CVE-2025-26603: fix use-after-free in str_to_reg() when redirecting\n  :display to a clipboard register; skip the active redir register\n  including the * and + clipboard fallbacks to register 0 (register.c,\n  upstream patch 9.1.1115)","modified":"2026-05-27T11:18:14.900112686Z","published":"2026-05-19T18:09:50Z","upstream":["CVE-2022-3278","CVE-2023-48234","CVE-2023-48236","CVE-2025-26603"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1779214181.html"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-X11?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els25"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779214181.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-common?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els25"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779214181.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els25"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779214181.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els25"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779214181.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-minimal?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els25"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1779214181.json"}}],"schema_version":"1.7.5"}