[CLSA-2026:1778004214] vim: Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-05-05 18:03:39 UTC
Description:
- CVE-2022-2124: fix out-of-bounds read in current_quote() when searching for quotes goes over the end of the line (textobject.c, upstream patch 8.2.5120) - CVE-2022-2126: fix invalid index use in suggest_trie_walk() when ts_fidx is zero (spellsuggest.c, upstream patch 8.2.5123) - CVE-2022-2207: fix read before start of line with BS in Replace mode (edit.c, upstream patch 8.2.5162) - CVE-2022-1720: fix read past end of line with "gf" in Visual block mode (normal.c, upstream patch 8.2.4956) - CVE-2022-2042: fix uninitialized value and use-after-free in spell command (spell.c, upstream patch 8.2.5072)
Updated packages:
  • vim-X11-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm
    sha:09626c01b8281bd447417322989810e17966b84e4f069e632bb4ce878752557f
  • vim-common-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm
    sha:28eff99142422ba0ceadd3d3cf695ee359f8a80dbd3c7746961c3ac5435768c4
  • vim-enhanced-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm
    sha:4cda985fe9bce61a30fe829f88b98ab5d22c23cbfb23156f04967110bea45896
  • vim-filesystem-8.2.2637-22.el9_2.1.tuxcare.els20.noarch.rpm
    sha:b29191e2c408a59f8a33d647b040483297fb089f1e93fe38850fcb9fa033e4cc
  • vim-minimal-8.2.2637-22.el9_2.1.tuxcare.els20.x86_64.rpm
    sha:277a7b7a9a9d0fc75c08aeb172008ef9c2974bc8544c9fc5a515a18651d6df25
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.