CLSA-2026-1777460138 vim: Fix of CVE-2022-2183

CVE-2022-2183: fix out-of-bounds read in getlispindent src/indent.c by guarding the that++; amount++; advance with if that != NUL so the lisp auto-indent pointer does not walk past the line's NUL terminator...

CLSA-2022-1657813374 Fix CVE(s): CVE-2022-2182, CVE-2022-2183, CVE-2022-2210, CVE-2022-2207

SECURITY UPDATE: Heap-based buffer overflow in function utfptr2char - debian/patches/CVE-2022-2182.patch: When on line zero check the column is valid for line one in doonecmd function - CVE-2022-2182 SECURITY UPDATE: Out-of-bounds read in function getlispindent - debian/patches/CVE-2022-2183.patc...

The vulnerability of the get_lisp_indent() function in the Vim text editor allows a hacker to gain unauthorized access to protected information.

The vulnerability of the getlispindent function in the Vim text editor is related to reading beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

PT-2022-3437

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to an out-of-bounds read in the Vim text editor, specifically in the get lisp indent function. This could allow a remote attacker to gain unauthorized access to protected information...

PT-2022-3443

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to a heap-based buffer overflow in the Vim text editor, specifically in the get lisp indent function. This could allow a remote attacker to execute arbitrary code. Recommendations For...