[CLSA-2026:1792153017] vim: Fix of 91 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-16 12:18:21 UTC
Description:
- CVE-2026-73072: fix heap buffer overflow in set_sofo() with a crafted spell file (upstream 9.2.0846) - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries (upstream 9.2.0840)
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:f7c7157a39df26e9ba0e1a3a1621c053be00a3e913daa1ef47e6438005cb96fb
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:25751bcf86b63fa73d2580232e3d159066fc551eb5b4b285e4b6063ddef827d0
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:dde618801cef15b6a44603d6b52ef88678f85c098b3de25c9f9ee895bd536566
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:c434a99a9290fcac332239172ee45d56c50b5192ca3b263293c8b519aaac4a07
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:f131822b7bd95e7aea09259ebcbce46d2f629444b40a59c2e92aaf93a82110f1
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:a4aa748df05b6b6cff4d263eb7eb4b75090e86621c87b31d462c44404eee9eca
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:48780cf33c33f216a28153ebace6de4450e7c89ff0abd339a597bf322dd26efa
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:029836187ed1974477576fb81cbcdc71abbe463fa5f0d7a7d63f924d39f1a357
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:8eb715e0a24fcab14ec88e27b11d4b5563c6dac7b56049e7d917201795651d81
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:78be579aca49833eeed626b67aa2b2fe35e9a545d790cacb8367f1e7d91be07e
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.