CLSA-2026-1787917228
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787917228.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1787917228
- Upstream
- Published
- 2026-10-23T22:25:50Z
- Modified
- 2026-10-26T09:32:03Z
- Summary
- Fix of 43 CVEs
- Details
-
- SECURITY UPDATE: crash when clearing the argument list while using it
- debian/patches/CVE-2021-4166.patch: lock the argument list for ":all"; matches upstream patch 8.2.3884.
- CVE-2021-4166
- SECURITY UPDATE: reading past end of completion with a long line
- debian/patches/CVE-2022-2343.patch: build the inferred-case text in a growarray when it outgrows IObuff; matches upstream patch 9.0.0045.
- CVE-2022-2343
- SECURITY UPDATE: memory access errors when calling setloclist() in an
autocommand
- debian/patches/CVE-2022-3016.patch: give an error if the list was changed unexpectedly and drop the stale pointer instead of storing it back; matches upstream patches 8.2.1677 and 9.0.0286.
- CVE-2022-3016
- SECURITY UPDATE: SpellFileMissing autocmd may delete buffer
- debian/patches/CVE-2022-3352.patch: disallow deleting the current buffer while loading a spell file; matches upstream patch 9.0.0614.
- CVE-2022-3352
- SECURITY UPDATE: filetype autocmd may cause freed memory access
- debian/patches/CVE-2022-3705.patch: set the quickfix-busy flag while filling the buffer; matches upstream patch 9.0.0805.
- CVE-2022-3705
- SECURITY UPDATE: invalid memory access in substitute with function
- debian/patches/CVE-2022-4141.patch: check for text or buffer being locked before jumping to a file; matches upstream patch 9.0.0947.
- CVE-2022-4141
- SECURITY UPDATE: crash when clearing the argument list while using it
- References
-
- https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787917228.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-3872
- https://nvd.nist.gov/vuln/detail/CVE-2021-3973
- https://nvd.nist.gov/vuln/detail/CVE-2021-3974
- https://nvd.nist.gov/vuln/detail/CVE-2021-4166
- https://nvd.nist.gov/vuln/detail/CVE-2022-0417
- https://nvd.nist.gov/vuln/detail/CVE-2022-1886
- https://nvd.nist.gov/vuln/detail/CVE-2022-1897
- https://nvd.nist.gov/vuln/detail/CVE-2022-1927
- https://nvd.nist.gov/vuln/detail/CVE-2022-2000
- https://nvd.nist.gov/vuln/detail/CVE-2022-2042
- https://nvd.nist.gov/vuln/detail/CVE-2022-2182
- https://nvd.nist.gov/vuln/detail/CVE-2022-2210
- https://nvd.nist.gov/vuln/detail/CVE-2022-2257
- https://nvd.nist.gov/vuln/detail/CVE-2022-2264
- https://nvd.nist.gov/vuln/detail/CVE-2022-2284
- https://nvd.nist.gov/vuln/detail/CVE-2022-2285
- https://nvd.nist.gov/vuln/detail/CVE-2022-2286
- https://nvd.nist.gov/vuln/detail/CVE-2022-2287
- https://nvd.nist.gov/vuln/detail/CVE-2022-2289
- https://nvd.nist.gov/vuln/detail/CVE-2022-2343
- https://nvd.nist.gov/vuln/detail/CVE-2022-2344
- https://nvd.nist.gov/vuln/detail/CVE-2022-3016
- https://nvd.nist.gov/vuln/detail/CVE-2022-3099
- https://nvd.nist.gov/vuln/detail/CVE-2022-3234
- https://nvd.nist.gov/vuln/detail/CVE-2022-3235
- https://nvd.nist.gov/vuln/detail/CVE-2022-3256
- https://nvd.nist.gov/vuln/detail/CVE-2022-3296
- https://nvd.nist.gov/vuln/detail/CVE-2022-3324
- https://nvd.nist.gov/vuln/detail/CVE-2022-3352
- https://nvd.nist.gov/vuln/detail/CVE-2022-3591
- https://nvd.nist.gov/vuln/detail/CVE-2022-3705
- https://nvd.nist.gov/vuln/detail/CVE-2022-4141
- https://nvd.nist.gov/vuln/detail/CVE-2022-4292
- https://nvd.nist.gov/vuln/detail/CVE-2023-2610
- https://nvd.nist.gov/vuln/detail/CVE-2023-4733
- https://nvd.nist.gov/vuln/detail/CVE-2023-4735
- https://nvd.nist.gov/vuln/detail/CVE-2023-4750
- https://nvd.nist.gov/vuln/detail/CVE-2023-4751
- https://nvd.nist.gov/vuln/detail/CVE-2023-4752
- https://nvd.nist.gov/vuln/detail/CVE-2023-4781
- https://nvd.nist.gov/vuln/detail/CVE-2023-5344
- https://nvd.nist.gov/vuln/detail/CVE-2023-5535
- https://nvd.nist.gov/vuln/detail/CVE-2026-73073