[CLSA-2026:1792808222] vim: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-24 18:53:08 UTC
Description:
- CVE-2026-73073: fix command injection via a crafted typename in ccomplete.vim omni completion (upstream 9.2.0845) - CVE-2026-43961: fix command injection via a crafted filename in netrw marked-file handling (upstream 9.2.0480) - CVE-2026-47167: fix Ruby code execution via a crafted pattern in the cucumber ftplugin (upstream 9.2.0496)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:6e49ed1a316d2bb115824634c56912baac8dc94ac07d0b91e620b6872804b01a
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:3359e013b7cdd5e9009a7aa764608149fbc47adc6a852630bbbc559598e73c94
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:b0294275d0cfae856dd4c95fdd5516a68c9d1d195a1fd1e5486d7dc12ea62bc8
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:f207ae905a80f71f7e3750be056c24a4df49c2ccb08adc8589810e1446834086
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:3727191680d0b3e496e964bb273967dc67b732c80931faae8fb94fd824ba923f
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:a6bf00eef463ae48d9e66841fd9b00085b03bc85f2a242ceddab55e758d94c3e
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:57d688640358201bd8af7b6a39e26e3429725f9895ac7c7935b1780595c5568c
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:53a09ff677755e79c2c0d1963ae0d66c640ecdcf831209631a2eca04df79f614
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els6.i686.rpm
    sha:7b7312814872ba0bdbd7c67ba93503f62be9e1fbd4d90ccefd6d1a5a3d2f6d74
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els6.x86_64.rpm
    sha:bdbdc1dd61fa23476afbbbb32224a3c09e0529a60771cd9544faa3be6f6dd59a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.