[CLSA-2026:1787083167] vim: Fix of CVE-2026-25749
Type:
security
Severity:
Important
Release date:
2026-08-18 20:54:06 UTC
Description:
- CVE-2026-25749: bound the copy of the 'helpfile' option value in get_tagfname() so an over-long value cannot overflow the MAXPATHL buffer, reserving room for the "tags" tail appended right after (upstream 9.1.2132)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els61.x86_64.rpm
    sha:52fe0beba19af84c85e11c2edd1b4e1c055e2830acc67a4562d9b44ad88809bb
  • vim-common-7.4.629-5.2.el6.tuxcare.els61.x86_64.rpm
    sha:2addf5ff6c4c8a7e28faef482188a47941728621f09af96597f3312eb1e10b74
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els61.x86_64.rpm
    sha:734a06f33337119749b2a608349917cfca82cfe687f123a0e198b49a7048138a
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els61.x86_64.rpm
    sha:cbf65b31962b6d80eaf50148abe51cae236a1343b1e20184c523899e41b4c2c3
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els61.x86_64.rpm
    sha:9d4d56628f817105b0bc364cd8c8a03005038d04e19bfbf692a32a508319d008
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.