{"id":"CLSA-2026-1778610428","summary":"vim: Fix of 3 CVEs","details":"- CVE-2022-2257: fix out-of-bounds read in str2special() when advancing\n  past the trailing NUL of a menu item with only a modifier (message.c,\n  upstream patch 9.0.0009)\n- CVE-2022-2182: fix heap buffer overflow in parse_cmd_address() when\n  address line 0 is used with the \";\" separator (\":0;/PATTERN/\"); clamp\n  cursor column via check_cursor_col() for line 0 (ex_docmd.c, upstream\n  patch 8.2.5150)\n- CVE-2022-2849: return zero byte length for NUL in latin_ptr2len() and\n  dbcs_ptr2len() so iterating past the end of a null string cannot\n  dereference an invalid address (mbyte.c, upstream patch 9.0.0220;\n  minimal form — only the functional changes backported)","modified":"2026-06-01T00:32:52.168688567Z","published":"2026-05-12T18:27:13Z","upstream":["CVE-2022-2257","CVE-2022-2182","CVE-2022-2849"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778610428.html"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-X11?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778610428.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-common?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778610428.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778610428.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778610428.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/vim-minimal?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_6.1.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778610428.json"}}],"schema_version":"1.7.5"}