[CLSA-2026:1794273506] vim: Fix of 14 CVEs
Type:
security
Severity:
Important
Release date:
2026-11-11 15:56:35 UTC
Description:
- CVE-2022-2042: fix use-after-free in spell checking (upstream 8.2.5072) - CVE-2022-2304: fix stack buffer overflow in spell_dump_compl() (upstream 9.0.0035) - CVE-2022-3099: fix invalid memory access with an invalid line number (upstream 9.0.0360) - CVE-2022-3324: fix stack buffer underflow with a negative window width (upstream 9.0.0598) - CVE-2022-4141: fix heap buffer overflow when CTRL-W gf is used while text is locked (upstream 9.0.0947) - CVE-2023-4781: fix heap buffer overflow when an autocommand changes the buffer during :s (upstream 9.0.1873) - CVE-2023-5535: fix use-after-free from autocommands triggered for a dummy buffer (upstream 9.0.2010)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els9.i686.rpm
    sha:6aa8cb795732a18b2b3b1e3ad63f8cc4a2514a788f5f905152315185568be48f
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els9.x86_64.rpm
    sha:a247222d1fb90a4dced4b2d12d4cc75b09aac5a0a58bf7c109b65be99cde63b1
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els9.i686.rpm
    sha:c91d8d0ec498725482953c8c9235fda624301ff55c55a4e617451e1ac81580cb
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els9.x86_64.rpm
    sha:2f7e3eb8c5be744a2aa3f2d73fd628ca2e7caf5e60f18b064245f85fc0ffa240
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els9.i686.rpm
    sha:bf10befb2a069f96699c13df087b8827f5d8cdc06e55a2b71fc4f95dff1bf5c9
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els9.x86_64.rpm
    sha:5bb3a5a86c718355db7b7fcfd9db175506c67219431541f9d4a3d830c8da35df
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els9.i686.rpm
    sha:6d770da450f95695d1c75a2a3c505241e3fef0a4821d8abbd8c295d58bf44c07
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els9.x86_64.rpm
    sha:fc6965705958be218f70ea3af72da9146ef9f506c21b6cf5878055ed59cd5ddd
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els9.i686.rpm
    sha:8ce5ce2adc6383300bf4c4a2b2b82cfa39c2b86b29c8086d590db05f8a6fe2dd
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els9.x86_64.rpm
    sha:83bd95c041e4b3fd915ec86408cb2d5ac0e5190d892768d764f2295e9cdb385a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.