[CLSA-2026:1791427864] vim: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-08 22:06:26 UTC
Description:
- CVE-2026-73072: fix heap buffer overflow in set_sofo() with a crafted spell file (upstream 9.2.0846) - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member (upstream 9.2.0847) - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries (upstream 9.2.0840)
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:4c4dca1f61905f796a0186afd3741efc43963e9985c545b4b7b11e615714f4f3
  • vim-X11-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:698c0f89f70ecfeb8daad464a96bff9730ba037640b8cfd46442e124b5433bc5
  • vim-common-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:7630a0eebeaa9fab381b6c8b837705bc998632edb0ca9de0fc7d1797e84a7631
  • vim-common-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:92a80fd7e6cea4fe3063c48c93ccd288f90be1e040436a297e96b21b4f637263
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:9f0eb85f613a0d1a096fbca7e9868312c8d23acc72cb9b9ca3ac677bde30437b
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:ea7774dffa44101c9941d5d086175ae31f59f7ed597f818d267078b34017f8f0
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:e0bbc1ef0b8315d851616cb64c99668351dd225cb0875529c44f8b48d1b44559
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:aed69ce10b8d858aedb54ff67d9965f6deba12d72a9c96b8d3162457341e3b19
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:8e9a995865cea60db10d1c27fc65f9c20decc588580e7fe7f91f0c3a9fc1651f
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:b0381c9adec4d3f07456e3e31f5991c00057fb054a4046dea3b14eae04b93606
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.