CLSA-2025-1761744996

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2025-1761744996

Upstream

CVE-2022-1927

CVE-2022-2042

CVE-2022-2581

CVE-2022-2849

Published

2025-10-29T13:36:40Z

Modified

2026-06-04T09:45:07.122942297Z

Summary

Fix CVE(s): CVE-2022-1927, CVE-2022-2042, CVE-2022-2581, CVE-2022-2849

Details

SECURITY UPDATE: Buffer Over-read because of invalid cursor position after "0;" range
- debian/patches/CVE-2022-1927.patch: check the cursor position when it was set by ";" in the range
- CVE-2022-1927
SECURITY UPDATE: Use After Free in spell command
- debian/patches/CVE-2022-2042.patch: initialize "attr", check for empty line early
- CVE-2022-2042
SECURITY UPDATE: Out-of-bounds Read when regex pattern starts with illegal byte
- debian/patches/CVE-2022-2581.patch: do not match a character with an illegal byte
- CVE-2022-2581
SECURITY UPDATE: Heap-based Buffer Overflow with for loop over NULL string
- debian/patches/CVE-2022-2849.patch: make sure mb_ptr2len() consistently returns zero for NUL
- CVE-2022-2849

References

https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761744996.html

Affected packages

TuxCare:Debian:10

vim

Package

Name: vim
Purl: pkg:deb/tuxcare/vim?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-athena

Package

Name: vim-athena
Purl: pkg:deb/tuxcare/vim-athena?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-common

Package

Name: vim-common
Purl: pkg:deb/tuxcare/vim-common?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-doc

Package

Name: vim-doc
Purl: pkg:deb/tuxcare/vim-doc?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-gtk

Package

Name: vim-gtk
Purl: pkg:deb/tuxcare/vim-gtk?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-gtk3

Package

Name: vim-gtk3
Purl: pkg:deb/tuxcare/vim-gtk3?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-gui-common

Package

Name: vim-gui-common
Purl: pkg:deb/tuxcare/vim-gui-common?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-nox

Package

Name: vim-nox
Purl: pkg:deb/tuxcare/vim-nox?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-runtime

Package

Name: vim-runtime
Purl: pkg:deb/tuxcare/vim-runtime?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

vim-tiny

Package

Name: vim-tiny
Purl: pkg:deb/tuxcare/vim-tiny?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"

xxd

Package

Name: xxd
Purl: pkg:deb/tuxcare/xxd?distro=debian-10

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:8.1.0875-5+deb10u6+tuxcare.els3

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1761744996.json"