CLSA-2025-1738170565 vim: Fix of 5 CVEs

CVE-2023-2610: limit the text length to MAXCOL - CVE-2023-4735: don't overflow buf2, check size in for loop - CVE-2023-4750: check buffer is valid before accessing it - CVE-2023-4752: validate buffer before accessing it - CVE-2023-4781: disallow exchanging windows when textlock is active - Drop...

PT-2023-9330 · Pillow +9 · Pillow +9

Name of the Vulnerable Software and Affected Versions: Pillow versions prior to 10.0.0 Description: The issue is related to a Denial of Service in Pillow, where the truetype function in ImageFont uncontrollably allocates memory when processing a long text argument in an ImageDraw instance. This c...

CLSA-2023-1685377319 vim: Fix of CVE-2023-2610

CVE-2023-2610: limit the text length to MAXCOL...