{"id":"CLSA-2026-1779271781","summary":"vim: Fix of 6 CVEs","details":"- CVE-2022-4292: also check win_valid_any_tab() in did_set_spelllang() after SpellFileMissing autocmd\n- CVE-2023-4751: reset_VIsual_and_resel() at start of ex_buffer_all() to prevent UAF on Visual mark\n- CVE-2023-0054: bail out of do_string_sub() when vim_regsub() returns sublen \u003c= 0\n- CVE-2022-2206: clamp cmdline_row/msg_row to Rows-1 at end of check_shellsize()\n- CVE-2023-5535: block_autocmds()/unblock_autocmds() around buf_contents_changed() temp-buffer life\n- CVE-2022-2129: tighten do_exedit() check to (textlock != 0 || curbuf_locked()) instead of curbuf_locked() only","modified":"2026-05-27T11:34:34.440859556Z","published":"2026-05-20T10:09:45Z","upstream":["CVE-2022-2129","CVE-2022-2206","CVE-2022-4292","CVE-2023-0054","CVE-2023-4751","CVE-2023-5535"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1779271781.html"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/vim-X11?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779271781.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/vim-common?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779271781.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779271781.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779271781.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/vim-minimal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.0.1763-19.el8.4.tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1779271781.json"}}],"schema_version":"1.7.5"}