[CLSA-2026:1786454677] vim: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 15:29:10 UTC
Description:
- CVE-2026-34982: fix modeline sandbox bypass leading to arbitrary OS command execution — add the 'modelineexpr' option and the P_MLE flag, and set P_MLE on the expression-evaluating options including complete/guitabtooltip/printheader (upstream 9.2.0276 with the 8.1.1366 modelineexpr prerequisite)
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els62.i686.rpm
    sha:1f334f47e9d5841ca1bc76cdfa27d5bec35507bf9160561adfdb027cd6499cc2
  • vim-X11-7.4.629-5.2.el6.tuxcare.els62.x86_64.rpm
    sha:bfa607df707d6e039c742e52e90c9cf17248997ea8113c5e211d6ecd868fd0b4
  • vim-common-7.4.629-5.2.el6.tuxcare.els62.i686.rpm
    sha:6bd7a4b20373ac2f26c51e4f99070ef6ddabedf8bc7bc8c136d4d46e6d9129aa
  • vim-common-7.4.629-5.2.el6.tuxcare.els62.x86_64.rpm
    sha:df6514eac331b83b4c0d6ba223671b8827485c2571b2affd8c90181d8dfc5fe0
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els62.i686.rpm
    sha:221558c453916e4690f8db7c0aced5868a477b279933a859dcf130f8c892f9d5
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els62.x86_64.rpm
    sha:fd15ccc4db1d59b08c1299544e98f9fe6cb7993e1053ae6c3739b7670d0ccfba
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els62.i686.rpm
    sha:dc07c10f5e3325e18fd3dff110c7b8a016459ab401ac07ff1f054bc301476634
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els62.x86_64.rpm
    sha:479a059c2e09977b65db0e60ac4b54dccc82ebbf4e41afe18f2dccad582766e3
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els62.i686.rpm
    sha:d81b29339506b6d6fa91b501f8c61c53771f9c09d933b8cf7f90ae1a6838f020
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els62.x86_64.rpm
    sha:a45564930ed58e9979fa189366c10a5608d21ce514265315019646bb2fcdd4c5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.