[CLSA-2026:1783787785] vim: Fix of CVE-2026-57456
Type:
security
Severity:
Important
Release date:
2026-07-12 19:18:10 UTC
Description:
- CVE-2026-57456: use repr() to quote python omni-completion doc strings before exec() in the Scope/Class/Function get_code() of pythoncomplete/python3complete, preventing code execution via a crafted docstring (upstream 9.2.0699)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els59.x86_64.rpm
    sha:5d6c3623965f57f55c65aa19314434c93fd112b0140fae2102448cc6261e3358
  • vim-common-7.4.629-5.2.el6.tuxcare.els59.x86_64.rpm
    sha:e7731ae70835ff5f8af40f1bdd6278fbb9ef696dfc3813987e85bc18db2a3892
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els59.x86_64.rpm
    sha:df6f5842a41c6c2682e2883a7252c7ec4434bb4ce6a331a00653dd888ebcc14d
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els59.x86_64.rpm
    sha:b7187939414be3fb514423afabc237f4791a06583e65c99a3a11d5d3f86f30b1
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els59.x86_64.rpm
    sha:cbe64bba82b834f86d326689f8030a950999f786113aa0d9ecd26509cfc0822a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.