[CLSA-2026:1792577361] vim: Fix of CVE-2026-35177
Type:
security
Severity:
Important
Release date:
2026-10-21 10:09:31 UTC
Description:
- CVE-2026-35177: fix path traversal in the zip.vim plugin - reject a write whose target escapes the archive directory after simplify() normalization (upstream 9.2.0280)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:6a27561a3226796800859cd03f98425c05cecdb166a6f7664122fc5cd2c36586
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:514eb6f282829bbd5e3a85b0c1da44288ac87fa978483fcca52bac549f8369f3
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:0a081be47d4e321f07067bf76b9c65d4074c58b45dea15fb8792235adaebbdfb
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:de7f051867f832ef25ccada12063d9c803c76aca3cd08f29fd68abb28fa5f20c
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:5fc84566f990b294e5ec543f69e6e4bd739307a120f010ed7ece33d8b9ac0fd9
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:00470cdb73bd5352e9a57de03804ae57a181288e567b9f60be9e4f5826b6746a
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:f0d66716acc7170cc4cdd1b64960524c011b7745777e6dac9c617436e3311ca0
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:4e084c6840cf6536a866e7f86f5477e8ffa3f0dc8dae8f6bca330d7e41359169
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:e63ebc767ae05e686a4304534709942a59814e51a49164a283b3d8d79c7e82ad
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:8da721d1836bd5732bec16d20e3c459a473e1ee3afc85af98f8a5a6892057452
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.