[CLSA-2026:1792577477] vim: Fix of CVE-2026-35177
Type:
security
Severity:
Important
Release date:
2026-10-22 01:32:45 UTC
Description:
- CVE-2026-35177: fix path traversal in the zip.vim plugin - reject a write whose target escapes the archive directory after simplify() normalization (upstream 9.2.0280)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:47b12253604a8fc20452b79d8c362034be72241cce07685df1a04422748ac539
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:adef76b0a18ea1d18805f7c949ee6a165cac6de3181670030358c68ba4b4136c
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:5d6dbe53c19f5dcfc7def8ac257d721b9e702a1441a081fa08efd2148989d85a
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:a98efc07bb453a188e9a9d1b72b867ea06fd66abe95f9a32de34ca4c5ce39996
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:697bb35eea949ee5140745bff86a9b8c93b3d5c87150d8a46cfbe614f1b37654
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:d279267d73cdf6ab5c1552dc3704b0d06b85a89b9008c88da5069e53cd9b425d
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:ef8556c866e57fac2e43bcfd1b42c73c58c887beba38732818d0385cb51a553c
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:3bbab914ea78a77e36b739e3936f608c7ab93a543e98438f3941c84043f17c1f
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:615fc7d95e67c38eeb42679092a3fe01a5e43cb437aee1bb5ed93ade8738ac02
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:3dea66359e786be29813423dd46fbaae17d5c4b54a873bdef75bcbaf723c55bf
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.