{"id":"CLSA-2026-1780697373","summary":"vim: Fix of CVE-2023-48234","details":"- CVE-2023-48234: in nv_zet() (normal.c), reject digit input that would\n  overflow the count accumulator by checking\n  n \u003e (LONG_MAX - (nchar - \"0\")) / 10 before n = n * 10 + (nchar - \"0\"),\n  so a large normal-mode z count no longer wraps around in long\n  arithmetic; equivalent to upstream commits 58f9befca1 and 22cbc8a4e1\n  combined.\n- CVE-2022-3705: in qf_update_buffer() (quickfix.c), guard the\n  qf_fill_buffer() call with a minimal backport of the upstream\n  quickfix_busy mechanism (from upstream 8.1.0488) so that\n  filetype/BufReadPost/BufWinEnter autocmds fired while filling the\n  buffer cannot free the location-list qf_info_T out from under us;\n  equivalent to upstream commit d0fab10ed2 (patch 9.0.0805).","modified":"2026-10-26T09:43:15.134055903Z","published":"2026-06-08T08:48:39Z","upstream":["CVE-2022-3705","CVE-2023-48234"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1780697373.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-48234"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/vim-X11?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780697373.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/vim-common?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780697373.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780697373.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780697373.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/vim-minimal?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.1.el7_9.tuxcare.els18"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780697373.json"}}],"schema_version":"1.9.0"}