Release date:
2026-05-29 15:17:26 UTC
Description:
- CVE-2026-46483: fix command injection in the tar plugin's tar#Vimuntar()
function by using the correct shellescape(tartail, 1) form so that a crafted
.tgz filename cannot trigger cmdline-special expansion in the :! command
Updated packages:
-
vim-X11-7.4.629-5.2.el6.tuxcare.els52.x86_64.rpm
sha:8766c8c49eaa2c1886585b83ab18896ade6f530a36f491203eadadf8b96655c2
-
vim-common-7.4.629-5.2.el6.tuxcare.els52.x86_64.rpm
sha:459ce1b7ebccd73864cffebe5532cd343be0fa924f10dd4ae5a7b6c2c131aa76
-
vim-enhanced-7.4.629-5.2.el6.tuxcare.els52.x86_64.rpm
sha:7c7465d9c0cc63b944b03783ad649fa86a089bde1fba6ab796904979d5869481
-
vim-filesystem-7.4.629-5.2.el6.tuxcare.els52.x86_64.rpm
sha:bd07547d9045be6e5b5b839aa9746b7d49f5e061eca2b28db751f786a1e9d4c0
-
vim-minimal-7.4.629-5.2.el6.tuxcare.els52.x86_64.rpm
sha:4c272106ab5984d316c57b676c8c7353311ff9c3121c600e7edbad588a625d3f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
