CLSA-2026-1780699842
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1780699842.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1780699842
- Upstream
CVE (2)
- Published
- 2026-06-13T10:47:16Z
- Modified
- 2026-10-26T09:31:41Z
- Summary
- vim: Fix of CVE-2022-3705
- Details
-
- CVE-2023-48234: in nv_zet() (normal.c), reject digit input that would overflow the count accumulator by checking n > (LONG_MAX - (nchar - "0")) / 10 before n = n * 10 + (nchar - "0"), so a large normal-mode z count no longer wraps around in long arithmetic; equivalent to upstream commits 58f9befca1 and 22cbc8a4e1 combined.
- CVE-2022-3705: in qf_update_buffer() (quickfix.c), guard the qf_fill_buffer() call with a minimal backport of the upstream quickfix_busy mechanism (from upstream 8.1.0488) so that filetype/BufReadPost/BufWinEnter autocmds fired while filling the buffer cannot free the location-list qf_info_T out from under us; equivalent to upstream commit d0fab10ed2 (patch 9.0.0805).
- References
Affected packages
TuxCare:CentOS:7 / vim-X11
Package
- Name
- vim-X11
- Purl
- pkg:rpm/tuxcare/vim-X11?distro=centos-7
TuxCare:CentOS:7 / vim-common
Package
- Name
- vim-common
- Purl
- pkg:rpm/tuxcare/vim-common?distro=centos-7
TuxCare:CentOS:7 / vim-enhanced
Package
- Name
- vim-enhanced
- Purl
- pkg:rpm/tuxcare/vim-enhanced?distro=centos-7
TuxCare:CentOS:7 / vim-filesystem
Package
- Name
- vim-filesystem
- Purl
- pkg:rpm/tuxcare/vim-filesystem?distro=centos-7