Release date:
2026-05-21 10:40:11 UTC
Description:
- CVE-2026-42307: fix OS command injection in netrw plugin via crafted sftp://
URLs by hardening the tempfile suffix regex and escaping the tempfile
argument before passing it to the sftp command
Updated packages:
-
vim-X11-7.4.629-5.2.el6.tuxcare.els51.x86_64.rpm
sha:2fb5af4f7500d592263102f9be27e78c5fad7695830eeca3e4a60f9642ae4b93
-
vim-common-7.4.629-5.2.el6.tuxcare.els51.x86_64.rpm
sha:71e65a8e0046c2e74f18cb60c3da3807ff5d3c3721050424916a3ffe49bed505
-
vim-enhanced-7.4.629-5.2.el6.tuxcare.els51.x86_64.rpm
sha:9bcbc04a77c0489a5904ef61d95cabd5fe0c571a007349a82ea7c74eb8edcd1c
-
vim-filesystem-7.4.629-5.2.el6.tuxcare.els51.x86_64.rpm
sha:f362385a71689b80cc21618f33cf211e971daa89989db0c63c8de81d1728ff9e
-
vim-minimal-7.4.629-5.2.el6.tuxcare.els51.x86_64.rpm
sha:06d60063c3f4b54a9f60f3a3d46b06d3ae234d2aec462f6e1d7d17879d6acfd0
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
