[CLSA-2026:1784042868] vim: Fix of CVE-2026-59858
Type:
security
Severity:
Important
Release date:
2026-07-17 09:41:10 UTC
Description:
- CVE-2026-59858: fix arbitrary Ex command execution in C omni-completion by escaping the typeref/typename tag field before inserting it into the :vimgrep pattern in ccomplete.vim (upstream 9.2.0735)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els60.x86_64.rpm
    sha:3a3d3f959afb5093910a52c87cd8ab34576211e1f57076c218428f8e1cd2e70e
  • vim-common-7.4.629-5.2.el6.tuxcare.els60.x86_64.rpm
    sha:6de50656ec1b899026d458b83b4dd7f1e103110e894ce8a2d6ec13dd39714088
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els60.x86_64.rpm
    sha:df3f29830bc741a84ae5d9b6301d9d6490f2c7ef5bd865ed89ec11a6a6486d69
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els60.x86_64.rpm
    sha:c4607187b1300ce2e5692efb0d2104787d694985d976e556d4add9f2154a490b
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els60.x86_64.rpm
    sha:56e36861268d34a8d99bc9efa626f916ca8dd6ad6f967979f0d5f566f9a27f50
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.