{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: out-of-bounds read when undo makes the Visual area\n invalid\n - debian/patches/CVE-2022-0368.patch: correct the Visual area after undo\n in src/undo.c, add test to src/testdir/test_visual.vim.\n - CVE-2022-0368\n * SECURITY UPDATE: buffer overflow in the spell suggest code after invalid\n bytes are added with :spellgood\n - debian/patches/CVE-2022-1621.patch: reject words that are not a valid\n utf-8 string in store_word() and spell_add_word() in src/spellfile.c,\n add the E1280 message to src/errors.h, build utf_valid_string() when\n FEAT_SPELL is enabled in src/mbyte.c, add test to\n src/testdir/test_spell_utf8.vim.\n - CVE-2022-1621\n * SECURITY UPDATE: buffer over-read on a trailing escape character in\n quote text objects\n - debian/patches/CVE-2022-1629.patch: check for NUL after the escape\n character in find_next_quote() in src/textobject.c, add test to\n src/testdir/test_textobjects.vim.\n - CVE-2022-1629\n * SECURITY UPDATE: heap buffer overflow when text is changed in Visual\n mode\n - debian/patches/CVE-2022-1735.patch: revalidate the Visual start\n position after a buffer change; add check_visual_pos() in src/misc2.c,\n src/proto/misc2.pro and call it from changed_common() in src/change.c\n and stop_insert() in src/edit.c; add test to\n src/testdir/test_visual.vim.\n - CVE-2022-1735\n * SECURITY UPDATE: use-after-free when searching for a pattern in path\n - debian/patches/CVE-2022-1968.patch: copy the buffer line into the\n file_line buffer before matching in find_pattern_in_path(), in\n src/search.c; add test in src/testdir/test_tagjump.vim.\n - CVE-2022-1968\n * SECURITY UPDATE: heap buffer over-read with a line-zero address (\"0;'(\")\n - debian/patches/CVE-2022-2182.patch: check that the cursor column is\n valid for line one when the address is zero, in parse_cmd_address() in\n src/ex_docmd.c; add regression test in src/testdir/test_cmdline.vim.\n - CVE-2022-2182\n * SECURITY UPDATE: out-of-bounds read with a menu item consisting of only\n a modifier\n - debian/patches/CVE-2022-2257.patch: check for NUL before advancing\n past the end of the string in str2special() in src/message.c, add test\n to src/testdir/test_menu.vim.\n - CVE-2022-2257\n * SECURITY UPDATE: Ex command injection in netrw remote file browsing\n - debian/patches/CVE-2026-55895.patch: use fnameescape() on the buffer\n name before passing it to :execute in s:NetrwBrowse() in\n runtime/autoload/netrw.vim.\n - CVE-2026-55895\n * SECURITY UPDATE: arbitrary code execution via a crafted doc string in\n python omni-completion\n - debian/patches/CVE-2026-57456.patch: quote reconstructed doc strings\n with repr() instead of pasting them between literal triple quotes, in\n the Scope, Class and Function get_code() methods in\n runtime/autoload/python3complete.vim and\n runtime/autoload/pythoncomplete.vim.\n - CVE-2026-57456\n * SECURITY UPDATE: arbitrary Ex command execution during C omni-completion\n - debian/patches/CVE-2026-59858.patch: escape the tags typeref/typename\n field with escape(typename, '/\\') before interpolating it into the\n :vimgrep pattern in s:StructMembers() in\n runtime/autoload/ccomplete.vim; add test in\n src/testdir/test_plugin_ccomplete.vim, src/testdir/Make_all.mak.\n - CVE-2026-59858\n * Fix the failing Test_terminal_cwd()\n - debian/patches/fix-Test_terminal_cwd.patch: join two lines to prevent\n fail on a long pathname\n * Fix the failing Test_quit_long_message()\n - debian/patches/fix-Test_quit_long_message.patch: wait for the more\n prompt instead of the ruler and dump 10 screen rows, so a long build\n pathname in the error message does not overflow the test terminal\n * Fix the tests that fail when the package is built as root\n - debian/patches/fix-tests-run-as-root.patch: guard the four\n permission-dependent tests with CheckNotRoot, splitting the read-only\n cases of Test_redir_cmd() and Test_helptag_cmd() into their own tests\n * Fix the tests that fail on the timing of the arm builders\n - debian/patches/fix-mouse-click-test-timing.patch: raise 'mousetime' in\n the two multiple-click mouse tests\n - debian/patches/fix-tests-tolerate-flaky-giveup.patch: add\n $TEST_MAY_FAIL_FLAKY, set by debian/rules on the non-amd64 targets, to\n report a given-up flaky test instead of failing the build\n - debian/patches/fix-tests-stray-swapfiles.patch: drop leftover scratch\n swap files between test files, so E325 cannot cascade", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian11els/advisories/2026/clsa-2026_1789206875.json" } ], "tracking": { "current_release_date": "2026-09-12T09:56:26Z", "generator": { "date": "2026-09-12T09:56:26Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1789206875", "initial_release_date": "2026-09-12T09:56:26Z", "revision_history": [ { "date": "2026-09-12T09:56:26Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 10 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 11", "product": { "name": "Debian 11", "product_id": "Debian-11", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:11:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product": { "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_id": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-nox@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=arm64" } } }, { "category": "product_version", "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product": { "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_id": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=arm64" } } }, { "category": "product_version", "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product": { "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_id": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-athena@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=arm64" } } }, { "category": "product_version", "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product": { "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_id": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-gtk3@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=arm64" } } }, { "category": "product_version", "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product": { "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_id": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/xxd@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=arm64" } } }, { "category": "product_version", "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product": { "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_id": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-tiny@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=arm64" } } } ], "category": "architecture", "name": "arm64" }, { "branches": [ { "category": "product_version", "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product": { "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_id": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-nox@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=armel" } } }, { "category": "product_version", "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product": { "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_id": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=armel" } } }, { "category": "product_version", "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product": { "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_id": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-athena@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=armel" } } }, { "category": "product_version", "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product": { "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_id": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-gtk3@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=armel" } } }, { "category": "product_version", "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product": { "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_id": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/xxd@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=armel" } } }, { "category": "product_version", "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product": { "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_id": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-tiny@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=armel" } } } ], "category": "architecture", "name": "armel" }, { "branches": [ { "category": "product_version", "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product": { "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_id": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-nox@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product": { "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_id": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product": { "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_id": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-athena@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product": { "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_id": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-gtk3@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product": { "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_id": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/xxd@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=amd64" } } }, { "category": "product_version", "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product": { "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_id": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-tiny@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product": { "name": "vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_id": "vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-gtk@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=all" } } }, { "category": "product_version", "name": "vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product": { "name": "vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_id": "vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-gui-common@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=all" } } }, { "category": "product_version", "name": "vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product": { "name": "vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_id": "vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-common@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=all" } } }, { "category": "product_version", "name": "vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product": { "name": "vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_id": "vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-runtime@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=all" } } }, { "category": "product_version", "name": "vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product": { "name": "vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_id": "vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "product_identification_helper": { "purl": "pkg:deb/tuxcare/vim-doc@2:8.2.2434-3%2Bdeb11u3%2Btuxcare.els3?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64 as a component of Debian 11", "product_id": "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64" }, "product_reference": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel as a component of Debian 11", "product_id": "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" }, "product_reference": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64 as a component of Debian 11", "product_id": "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64" }, "product_reference": "vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64 as a component of Debian 11", "product_id": "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64" }, "product_reference": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64 as a component of Debian 11", "product_id": "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64" }, "product_reference": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel as a component of Debian 11", "product_id": "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" }, "product_reference": "vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64 as a component of Debian 11", "product_id": "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64" }, "product_reference": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64 as a component of Debian 11", "product_id": "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64" }, "product_reference": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel as a component of Debian 11", "product_id": "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" }, "product_reference": "vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all as a component of Debian 11", "product_id": "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all" }, "product_reference": "vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64 as a component of Debian 11", "product_id": "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64" }, "product_reference": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel as a component of Debian 11", "product_id": "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" }, "product_reference": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64 as a component of Debian 11", "product_id": "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64" }, "product_reference": "vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all as a component of Debian 11", "product_id": "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all" }, "product_reference": "vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all as a component of Debian 11", "product_id": "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all" }, "product_reference": "vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64 as a component of Debian 11", "product_id": "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64" }, "product_reference": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64 as a component of Debian 11", "product_id": "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64" }, "product_reference": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel as a component of Debian 11", "product_id": "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" }, "product_reference": "xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel as a component of Debian 11", "product_id": "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" }, "product_reference": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64 as a component of Debian 11", "product_id": "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64" }, "product_reference": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64 as a component of Debian 11", "product_id": "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64" }, "product_reference": "vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all as a component of Debian 11", "product_id": "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all" }, "product_reference": "vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "relates_to_product_reference": "Debian-11" }, { "category": "default_component_of", "full_product_name": { "name": "vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all as a component of Debian 11", "product_id": "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all" }, "product_reference": "vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "relates_to_product_reference": "Debian-11" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-0368", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-0368" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/28", "url": "http://seclists.org/fulldisclosure/2022/Oct/28" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/41", "url": "http://seclists.org/fulldisclosure/2022/Oct/41" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/43", "url": "http://seclists.org/fulldisclosure/2022/Oct/43" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/8d02ce1ed75d008c34a5c9aaa51b67cbb9d33baa", "url": "https://github.com/vim/vim/commit/8d02ce1ed75d008c34a5c9aaa51b67cbb9d33baa" }, { "category": "external", "summary": "https://huntr.dev/bounties/bca9ce1f-400a-4bf9-9207-3f3187cb3fa9", "url": "https://huntr.dev/bounties/bca9ce1f-400a-4bf9-9207-3f3187cb3fa9" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html", "url": "https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html", "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202208-32", "url": "https://security.gentoo.org/glsa/202208-32" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213444", "url": "https://support.apple.com/kb/HT213444" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213488", "url": "https://support.apple.com/kb/HT213488" } ], "release_date": "2022-01-26T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-1629", "cwe": { "id": "CWE-126", "name": "Buffer Over-read" }, "notes": [ { "category": "description", "text": "Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-1629" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/28", "url": "http://seclists.org/fulldisclosure/2022/Oct/28" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/41", "url": "http://seclists.org/fulldisclosure/2022/Oct/41" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd", "url": "https://github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd" }, { "category": "external", "summary": "https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee", "url": "https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202208-32", "url": "https://security.gentoo.org/glsa/202208-32" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-16", "url": "https://security.gentoo.org/glsa/202305-16" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213488", "url": "https://support.apple.com/kb/HT213488" } ], "release_date": "2022-05-10T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-2182", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-2182" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e", "url": "https://github.com/vim/vim/commit/f7c7c3fad6d2135d558f3b36d0d1a943118aeb5e" }, { "category": "external", "summary": "https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8", "url": "https://huntr.dev/bounties/238d8650-3beb-4831-a8f7-6f0b597a6fb8" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202208-32", "url": "https://security.gentoo.org/glsa/202208-32" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-16", "url": "https://security.gentoo.org/glsa/202305-16" } ], "release_date": "2022-06-23T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-1621", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-1621" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/28", "url": "http://seclists.org/fulldisclosure/2022/Oct/28" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/41", "url": "http://seclists.org/fulldisclosure/2022/Oct/41" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/7c824682d2028432ee082703ef0ab399867a089b", "url": "https://github.com/vim/vim/commit/7c824682d2028432ee082703ef0ab399867a089b" }, { "category": "external", "summary": "https://huntr.dev/bounties/520ce714-bfd2-4646-9458-f52cd22bb2fb", "url": "https://huntr.dev/bounties/520ce714-bfd2-4646-9458-f52cd22bb2fb" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html", "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html", "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202208-32", "url": "https://security.gentoo.org/glsa/202208-32" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-16", "url": "https://security.gentoo.org/glsa/202305-16" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213488", "url": "https://support.apple.com/kb/HT213488" } ], "release_date": "2022-05-10T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-57456", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-57456" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8", "url": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0699", "url": "https://github.com/vim/vim/releases/tag/v9.2.0699" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3", "url": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3" } ], "release_date": "2026-06-25T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-59858", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honors the bar as a command separator, a crafted tag field can close the search pattern and append an arbitrary Ex command; opening a hostile .c file whose project tags file contains such an entry and invoking C omni-completion runs that command as the editing user. This issue is fixed in version 9.2.0735.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-59858" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e", "url": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x", "url": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x" } ], "release_date": "2026-07-09T23:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-2257", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-2257" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/083692d598139228e101b8c521aaef7bcf256e9a", "url": "https://github.com/vim/vim/commit/083692d598139228e101b8c521aaef7bcf256e9a" }, { "category": "external", "summary": "https://huntr.dev/bounties/ca581f80-03ba-472a-b820-78f7fd05fe89", "url": "https://huntr.dev/bounties/ca581f80-03ba-472a-b820-78f7fd05fe89" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43Y3VJPOTTY3NTREDIFUPITM2POG4ZLP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXPO5EHDV6J4B27E65DOQGZFELUFPRSK/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202208-32", "url": "https://security.gentoo.org/glsa/202208-32" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-16", "url": "https://security.gentoo.org/glsa/202305-16" } ], "release_date": "2022-06-30T21:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-1968", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "Use After Free in GitHub repository vim/vim prior to 8.2.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-1968" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/28", "url": "http://seclists.org/fulldisclosure/2022/Oct/28" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/41", "url": "http://seclists.org/fulldisclosure/2022/Oct/41" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895", "url": "https://github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895" }, { "category": "external", "summary": "https://huntr.dev/bounties/949090e5-f4ea-4edf-bd79-cd98f0498a5b", "url": "https://huntr.dev/bounties/949090e5-f4ea-4edf-bd79-cd98f0498a5b" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html", "url": "https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html", "url": "https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202208-32", "url": "https://security.gentoo.org/glsa/202208-32" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-16", "url": "https://security.gentoo.org/glsa/202305-16" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213488", "url": "https://support.apple.com/kb/HT213488" } ], "release_date": "2022-06-02T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-55895", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer's directory listing is interpolated into an Ex command line passed to :execute with only the backslash character escaped, allowing a crafted filename containing a bar (|) to terminate the intended command and execute arbitrary Vimscript, including shell commands via :call system() and :!. This vulnerability is fixed in 9.2.0663.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-55895" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2", "url": "https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0663", "url": "https://github.com/vim/vim/releases/tag/v9.2.0663" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh", "url": "https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh" } ], "release_date": "2026-06-25T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-1735", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-1735" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/28", "url": "http://seclists.org/fulldisclosure/2022/Oct/28" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Oct/41", "url": "http://seclists.org/fulldisclosure/2022/Oct/41" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/7ce5b2b590256ce53d6af28c1d203fb3bc1d2d97", "url": "https://github.com/vim/vim/commit/7ce5b2b590256ce53d6af28c1d203fb3bc1d2d97" }, { "category": "external", "summary": "https://huntr.dev/bounties/c9f85608-ff11-48e4-933d-53d1759d44d9", "url": "https://huntr.dev/bounties/c9f85608-ff11-48e4-933d-53d1759d44d9" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202208-32", "url": "https://security.gentoo.org/glsa/202208-32" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-16", "url": "https://security.gentoo.org/glsa/202305-16" }, { "category": "external", "summary": "https://support.apple.com/kb/HT213488", "url": "https://support.apple.com/kb/HT213488" } ], "release_date": "2022-05-17T19:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-09-12T09:54:38.795199Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875", "product_ids": [ "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-athena-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-doc-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-gtk3-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-gui-common-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-nox-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:vim-runtime-2:8.2.2434-3+deb11u3+tuxcare.els3.all", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:vim-tiny-2:8.2.2434-3+deb11u3+tuxcare.els3.armel", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.amd64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.arm64", "Debian-11:xxd-2:8.2.2434-3+deb11u3+tuxcare.els3.armel" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789206875" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }