[CLSA-2026:1791426968] vim: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-08 09:25:48 UTC
Description:
- CVE-2026-73072: fix heap buffer overflow in set_sofo() with a crafted spell file (upstream 9.2.0846) - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member (upstream 9.2.0847) - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries (upstream 9.2.0840)
Updated packages:
  • vim-X11-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:afe484889a4a3c99046592f2c5b79fee5e7d53d38fa73e2adf757afa5a05d86e
  • vim-X11-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:02a292b2fa46ae65b3d0c9692b7acd39ba98026f09c75d58c97781059e8737c3
  • vim-common-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:68607f7d89af7dfd974a738d127806456b64f73704a4c30d490bd77c05922d83
  • vim-common-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:459fc2f7c8acc0b9f040a28da6cc75595c0f78ac661bd5714be39fd92b168f85
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:4a213518f9a4e7fad2d04427e59bb8456cd5f27af51c10149c8038123254ede5
  • vim-enhanced-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:1fd057e874d10524e1b1ba713e5fed3d944d3ce0340319d961224fa71e38cc69
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:15c4aac59919a2e15dbfaf49ef02ed905ddef3cd5a4a6a42e029861415c949fa
  • vim-filesystem-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:bb0bf12a427c4f43a8b366990ceedf6b7ab91557b7791b7bf29bad592a3ce1fc
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els63.i686.rpm
    sha:6bdea8cb17025b01144a1c4a4e90c43377d9bc5ff61c611904309136f14a30a7
  • vim-minimal-7.4.629-5.2.el6.tuxcare.els63.x86_64.rpm
    sha:ccc6c74ad9d447c3139e550417b6ced991d828575a7df86007896f673185162f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.