Release date:
2026-05-20 10:11:12 UTC
Description:
- CVE-2026-35177: fix path traversal in zip.vim — block .. components via simplify() in zip#Write and zip#Extract (upstream vim 9.2.0280 + CVE-2025-53906 prereq combined)
Updated packages:
-
vim-X11-8.0.1763-16.el8.tuxcare.els13.x86_64.rpm
sha:0bf2f88df86af8e9e6adfa843d4d92c10d9292a6d2663c860c4edbc017607351
-
vim-common-8.0.1763-16.el8.tuxcare.els13.x86_64.rpm
sha:671993bc5a7d22d8c781f6049a64eae61a23133cfc70c53bb7df3636d1b0ee76
-
vim-enhanced-8.0.1763-16.el8.tuxcare.els13.x86_64.rpm
sha:c126edc0d3b39190b9aeaf9172350fb0403b005d1887ddc954cf70fc699191b6
-
vim-filesystem-8.0.1763-16.el8.tuxcare.els13.noarch.rpm
sha:3a85359945ea7502d256944360cfb253d6251d0d8e96488a87fa718679021694
-
vim-minimal-8.0.1763-16.el8.tuxcare.els13.x86_64.rpm
sha:5dd45580f3b42b62e95eb60cd9ece3ed6a7f818ca2fb71b928e65304fd7bbcc4
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.