[CLSA-2026:1781030937] vim: Fix of CVE-2026-41411
Type:
security
Severity:
Important
Release date:
2026-06-11 20:01:28 UTC
Description:
- CVE-2026-41411: fix OS command injection in tag file processing by disallowing backticks in the filename field before wildcard expansion (upstream patch 9.2.0357)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els53.x86_64.rpm
    sha:5c8d3b041b03a15e0254d6f6433fb69e21808f3aa3ee11e0b7febc7d7084f960
  • vim-common-7.4.629-5.2.el6.tuxcare.els53.x86_64.rpm
    sha:62e87588f2409a2269e100817540a67e30cbf4dfa6f10478287daf92499eceb9
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els53.x86_64.rpm
    sha:56fb191ef188c66f759f062d16175b4f3aad6f080e5a83b8c7e6ffc92c5f8167
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els53.x86_64.rpm
    sha:0ce6874b90a71b91078e1aa63cb502f5136c61ca424df495d2b36b73fb1ee597
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els53.x86_64.rpm
    sha:7f5597d240f5cd5a9ab378a00da8278af5a1dfef9dab48c29e16292639e16ca7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.