[CLSA-2026:1791476847] vim: Fix of CVE-2026-73076
Type:
security
Severity:
Important
Release date:
2026-10-08 23:16:22 UTC
Description:
- CVE-2026-73076: fix code execution via a poisoned .VimballRecord file - refuse a vimball member named .VimballRecord and replay only call delete() entries on :RmVimball (upstream 9.2.0847)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:92ad361891fd6704f5fdd39afe37bd04b055d0ea2a4bc905bfde0f6f3b2b38d6
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:bc5a5734326e6b5fa6d7bed1ce656c4456ad39954c13c2f4b60412e944b31585
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:f9d11a602318c0ebd8c69b477d6f81f2eb9e6c224cdcbe881e10eed108b1b162
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:3118089c490c0066e1ed94fbcebee0a23f5c2bcaa394c7d21995224034151788
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:13f956969ed214d9812b17413a8df6c0584dcd30db1bb1c8a8cb378db784e126
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:832eab6c513fabac82dc7af3e731e2f5d000837abfbfaaf1ec9853b0be3eea1d
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:4ef133ee1bacdc7048e982795cb8692b0aaffab534a6d6c84eddc182cf820094
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:6da2d1a6c984e2b48c3d6bdbb0d7e0b1f3acd9e891acb4f331eb012bca5d3cca
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els3.i686.rpm
    sha:dfff15454f8cfcdeb595665af58ec82ab7f45f9d6d9d7d05ea8b28e9936a95f2
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els3.x86_64.rpm
    sha:8e727c1e62b1815c31aa3a08f752df01de537ae5edb7ce6fb05d857532b1d5a7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.