{"id":"CLSA-2026-1778602862","summary":"vim: Fix of 4 CVEs","details":"- CVE-2022-2175: fix invalid memory access in cmdline_insert_reg() when\n  using an expression on the command line; save/restore new_cmdpos around\n  the expression evaluation (ex_getln.c, upstream patch 8.2.5148; hunk 3\n  context adjusted for 8.2.2637)\n- CVE-2022-3256: fix use-after-free in movemark() when an autocommand\n  changes the mark; make a local copy of the fmark before potentially\n  triggering buffer autocommands (mark.c, upstream patch 9.0.0530)\n- CVE-2022-4292: fix use-after-free in did_set_spelllang() when a\n  SpellFileMissing autocommand uses :bwipe to close the current window;\n  also bail out when the window is no longer valid (spell.c, upstream\n  patch 9.0.0882)\n- CVE-2022-3324: fix negative-index buffer access caused by negative\n  window width; clamp next_curwin_size in win_equal_rec() and clamp\n  wp-\u003ew_width in win_new_width() (window.c, upstream patch 9.0.0598)","modified":"2026-06-01T00:31:51.443867366Z","published":"2026-05-12T16:21:08Z","upstream":["CVE-2022-2175","CVE-2022-3256","CVE-2022-4292","CVE-2022-3324"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778602862.html"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-X11?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els21"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778602862.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els21"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778602862.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els21"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778602862.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els21"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778602862.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-minimal?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els21"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1778602862.json"}}],"schema_version":"1.7.5"}