[CLSA-2026:1792153388] vim: Fix of 91 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-17 12:10:52 UTC
Description:
- CVE-2026-73072: fix heap buffer overflow in set_sofo() with a crafted spell file (upstream 9.2.0846) - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries (upstream 9.2.0840)
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:52caca24616c45cbf4c9e9f56b0aa5b2c1d8c649011e6c46962325da2f56da4b
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:b1f228ef586b10e43ffda6c47a39049ce4138c34b55edca18ca7ea7cfb6c679f
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:ad14ef6ddbb1b19a770edb20d1b09d4288620d75a1ada90dfd3083ded009b410
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:3ea3d1925fbfb064a5f53864cd723b80294a44a6546c78839e2d88511a0b1480
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:ddb81c15c838db3dbeb54de6f8cccdd69fa527fab02f230a1c23b7d4170895da
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:80bfd8fc6adfb2f446f5d6d2419626f1c1c6a1250746e516c3eaff3ea6facafb
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:3a6571dce44d840b1b2720daa36d90a361394bf411ad0341cff69743ce5454ba
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:fc26013901bef1b4bb1a6ad4292905c7d186790a93a35f9de666b53876b4f293
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:549b716a1b1fadb6c61d7229bf4828ca2843be2ed491214f54632137551824ea
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:32b283ee93cf93af26634ad721777e82cfced6f83ff7c69b016ceef710931386
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.