[CLSA-2026:1791334139] Fix of 22 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-07 07:32:27 UTC
Description:
* SECURITY UPDATE: using uninitialized value and freed memory in spell command - debian/patches/CVE-2022-2042.patch: using uninitialized value and freed memory in spell command - CVE-2022-2042 * SECURITY UPDATE: invalid memory access when using expression on command line - debian/patches/CVE-2022-2175.patch: invalid memory access when using expression on command line - CVE-2022-2175 * SECURITY UPDATE: reading before the start of the line with BS in Replace mode - debian/patches/CVE-2022-2207.patch: reading before the start of the line with BS in Replace mode - CVE-2022-2207 * SECURITY UPDATE: invalid memory access after diff buffer manipulations - debian/patches/CVE-2022-2210.patch: invalid memory access after diff buffer manipulations - CVE-2022-2210 * SECURITY UPDATE: reading beyond the end of the line with put command - debian/patches/CVE-2022-2264.patch: reading beyond the end of the line with put command - CVE-2022-2264 * SECURITY UPDATE: accessing memory beyond the end of the line - debian/patches/CVE-2022-2284.patch: accessing memory beyond the end of the line - CVE-2022-2284 * SECURITY UPDATE: going over the end of the typahead - debian/patches/CVE-2022-2285.patch: going over the end of the typahead - CVE-2022-2285 * SECURITY UPDATE: invalid memory access when adding word to spell word list - debian/patches/CVE-2022-2287.patch: invalid memory access when adding word to spell word list - CVE-2022-2287 * SECURITY UPDATE: accessing freed memory with diff put - debian/patches/CVE-2022-2289.patch: accessing freed memory with diff put - CVE-2022-2289 * SECURITY UPDATE: reading past end of completion with duplicate match - debian/patches/CVE-2022-2344.patch: reading past end of completion with duplicate match - CVE-2022-2344 * SECURITY UPDATE: using freed memory with recursive substitute - debian/patches/CVE-2022-2345.patch: using freed memory with recursive substitute - CVE-2022-2345 * SECURITY UPDATE: reading past end of line with insert mode completion - debian/patches/CVE-2022-2571.patch: reading past end of line with insert mode completion - CVE-2022-2571 * SECURITY UPDATE: invalid memory access when compiling :unlet - debian/patches/CVE-2022-2816.patch: invalid memory access when compiling :unlet - CVE-2022-2816 * SECURITY UPDATE: reading before the start of the line - debian/patches/CVE-2022-2845.patch: reading before the start of the line - CVE-2022-2845 * SECURITY UPDATE: using freed memory with multiple line breaks in expression - debian/patches/CVE-2022-2889.patch: using freed memory with multiple line breaks in expression - CVE-2022-2889 * SECURITY UPDATE: using freed memory when 'tagfunc' deletes the buffer - debian/patches/CVE-2022-2946.patch: using freed memory when 'tagfunc' deletes the buffer - CVE-2022-2946 * SECURITY UPDATE: using freed memory when using 'quickfixtextfunc' recursively - debian/patches/CVE-2022-2982.patch: using freed memory when using 'quickfixtextfunc' recursively - CVE-2022-2982 * SECURITY UPDATE: using freed memory when location list changed in autocmd - debian/patches/CVE-2022-3016.patch: using freed memory when location list changed in autocmd - CVE-2022-3016 * SECURITY UPDATE: crash when no errors and 'quickfixtextfunc' is set - debian/patches/CVE-2022-3037.patch: crash when no errors and 'quickfixtextfunc' is set - CVE-2022-3037 * SECURITY UPDATE: illegal memory access when replacing in virtualedit mode - debian/patches/CVE-2022-3234.patch: illegal memory access when replacing in virtualedit mode - CVE-2022-3234 * SECURITY UPDATE: using freed memory with cmdwin and BufEnter autocmd - debian/patches/CVE-2022-3235.patch: using freed memory with cmdwin and BufEnter autocmd - CVE-2022-3235 * SECURITY UPDATE: dummy buffer ends up in a window - debian/patches/CVE-2022-3591.patch: dummy buffer ends up in a window - CVE-2022-3591
Updated packages:
  • vim_8.2.2434-3+deb11u3+tuxcare.els16_amd64.deb
    sha:ee7dc96d2a0b62e04d3c9a6463221f4f20b3332a
  • vim-athena_8.2.2434-3+deb11u3+tuxcare.els16_amd64.deb
    sha:7052aa9b5ac05c2afc0056735c95e501acc77ca6
  • vim-common_8.2.2434-3+deb11u3+tuxcare.els16_all.deb
    sha:0e21ad29ca4ec14cd34989b4e87e8bffc4ef67b3
  • vim-doc_8.2.2434-3+deb11u3+tuxcare.els16_all.deb
    sha:c82790a807fb9534b9e4d2e6fea3657630d02fbe
  • vim-gtk_8.2.2434-3+deb11u3+tuxcare.els16_all.deb
    sha:7e4a54c25b90fafd6b166a7e8d179a825930ff7c
  • vim-gtk3_8.2.2434-3+deb11u3+tuxcare.els16_amd64.deb
    sha:4a8b8558b8dbab5f279f247ca5a6a4b20fad1740
  • vim-gui-common_8.2.2434-3+deb11u3+tuxcare.els16_all.deb
    sha:26aa7a3e023709615b9de1c1dcd18c900e077952
  • vim-nox_8.2.2434-3+deb11u3+tuxcare.els16_amd64.deb
    sha:4e5a1607e0db657f221fa33f5ecf1cdfb7d560b8
  • vim-runtime_8.2.2434-3+deb11u3+tuxcare.els16_all.deb
    sha:08175cc24970d1aede4757035c2699516bdcd434
  • vim-tiny_8.2.2434-3+deb11u3+tuxcare.els16_amd64.deb
    sha:22ec7899ed56ebf7b09b98f9a31732ddc2c45cce
  • xxd_8.2.2434-3+deb11u3+tuxcare.els16_amd64.deb
    sha:9c3ceb191dc06910dce9fb896d33ad548b1b8eb6
  • vim_8.2.2434-3+deb11u3+tuxcare.els16_arm64.deb
    sha:6f2a376bc0565d5dedcf54ccc5891ea2b5820340
  • vim-athena_8.2.2434-3+deb11u3+tuxcare.els16_arm64.deb
    sha:538f93335b60b6282a5153175bb0c81ff8c3cb1b
  • vim-gtk3_8.2.2434-3+deb11u3+tuxcare.els16_arm64.deb
    sha:a218cf8cf2f8a5b0375071f3a26cd1e32af0ec9c
  • vim-nox_8.2.2434-3+deb11u3+tuxcare.els16_arm64.deb
    sha:8105cf77c5577532445e05dda5e2aa8ee45cec26
  • vim-tiny_8.2.2434-3+deb11u3+tuxcare.els16_arm64.deb
    sha:82a8b5dbefde5a44d1170fc1d0952b702ce44aef
  • xxd_8.2.2434-3+deb11u3+tuxcare.els16_arm64.deb
    sha:6d61cec141fe19bf22801b6231b9748f2d416c91
  • vim_8.2.2434-3+deb11u3+tuxcare.els16_armel.deb
    sha:2921e04ed1d06b5ff164ab4bd8d71588b0f39e73
  • vim-athena_8.2.2434-3+deb11u3+tuxcare.els16_armel.deb
    sha:9d41e17860561e64d470d6126037b90d49a0c9f3
  • vim-gtk3_8.2.2434-3+deb11u3+tuxcare.els16_armel.deb
    sha:fe1bfa3e48fc0b9b21d87ab543778ff4ec5564fa
  • vim-nox_8.2.2434-3+deb11u3+tuxcare.els16_armel.deb
    sha:9d353a60f0a243a2e6abe54967737fa8a9d42794
  • vim-tiny_8.2.2434-3+deb11u3+tuxcare.els16_armel.deb
    sha:9f52125d15f87b122f6e54913fa65e16e3cc9504
  • xxd_8.2.2434-3+deb11u3+tuxcare.els16_armel.deb
    sha:b4ebb85488788b984cffdcd9543adc4b4d2b1390
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.