CLSA-2026-1774363216 vim: Fix of 3 CVEs

CVE-2026-28420: fix heap-buffer-overflow in :terminal when processing Unicode combining characters from supplementary planes - CVE-2026-28418: fix OOB read in Emacs tags parsing with overlong tag file - CVE-2026-28419: fix heap-buffer-underflow in Emacs tags parsing when delimiter appears at...

The vulnerability of the HWPFile::TagsRead function in the LibreOffice office software package allows a hacker to induce a service failure.

The vulnerability of the HWPFile::TagsRead function in the LibreOffice office software package is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...