[CLSA-2026:1792807762] vim: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-24 02:09:34 UTC
Description:
- CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion (upstream 9.2.0845) - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling (upstream 9.2.0480) - CVE-2026-47167: fix Ruby code execution via a crafted pattern in the cucumber ftplugin (upstream 9.2.0496)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:dad239f0bb34db7bc86977fde3b1d496df5ace3d0de5be4b1a8021dd4bd683bf
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:c2670e46c6f41a4ad319be6cb92f663b985c30ec283e9658a7405e46a0260b25
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:4444f0318e5d827db58e433704175c86d95b3c6076b82d3284409fa501a6c5d5
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:a6369fdabbf14c46dddf93821b761e0f3a18a33d1e3bb9b359cd967631b85857
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:749fd6b033349e176fa137c98ad1e6c499c394b17f1e8a7e9f4caf3aa749c5c5
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:65242d6c3e5b713de61904413aa38b072aa3c54f3a04c4502302e4a60707933e
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:550898913fff508a6ec4caa2073c951b3bd70d47216149db6855dc54aa923c11
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:fa66898d75108cfcfb519f1e6dc614953f7ff8fe9ad45139a170762eec910fcd
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:1dc305920da73c9520a993adfcdb9d45272b55eae31f2ecb099820599ba3eedc
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:7c5c695054b0cb12cdb5f31bcdb9c78731e1dd2c24e5b07b889f0e050ff29916
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.