[CLSA-2026:1792486744] vim: Fix of CVE-2026-35177
Type:
security
Severity:
Important
Release date:
2026-10-20 16:49:07 UTC
Description:
- CVE-2026-35177: fix path traversal in the zip.vim plugin - reject a write whose target escapes the archive directory after simplify() normalization (upstream 9.2.0280)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.aarch64.rpm
    sha:44e476f848f67238b6acbf2656509a82f6ea928bda04a4e37060f60dbcf5731b
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:71c2d3d48f31dd94264ae3e68cbb94cbf19f2e011c87ff4412a237ea9995b10c
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:fb011d31fc44cf55c86dd9c3e69f2f6d186b9e0103c9e31edfac1f182972bf48
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.aarch64.rpm
    sha:749d4b550bdd32ef9bc4659ae47add73e6779cbbdb854b0bd1d77d2e97167d2e
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:cc45d837e35a4028f22088e7e23291623e6b74a1a56675c729e3e48f7bbbc82b
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:a792edcca05877cfc2ad278f8376465652be1bd6ae7f51c36e4f9a5823b99b3d
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.aarch64.rpm
    sha:e8516f3be9562b10bd1c97d3f6b841b4af2c5a71d33b860bf28d5066857c4d24
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:9546a0868ed7e15ee85d0a2aa183b124eede2ae824e503bcd7a63996922c6fdb
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:4c8f23c1b024a19141914c65fafb0340af2b4539f70bcee37bb63a7fe77ac472
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.aarch64.rpm
    sha:b3b4a02e6ccf2f3cf5d284b7a6e1cf6eb1127c47b1bb7ad683024695630426f3
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:af8e8841141a77f93f052c9e84bdf6892a4b07b1807a0a8e19ff76a13c12d9f0
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:90ce244cc78da680e282a6f8792ae64db2ae4fa42e5930d9ede2818210f8ff10
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.aarch64.rpm
    sha:73031fb73ef2aa9c0fc40e76d3c4f5bac44dcba8d5c41f238bc7eab25625a9b5
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:ec0c2b306aa0358b2ffc7de8a9862b00f4852af4be371c6f69b047859ffa72fb
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:02db4aa4c3f622f299e6a0d41db67f8ed49c5c584187994ac946dff704e24323
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.