[CLSA-2026:1791488919] vim: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-08 19:48:50 UTC
Description:
- CVE-2026-73072: fix heap buffer overflow in set_sofo() with a crafted spell file (upstream 9.2.0846) - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries (upstream 9.2.0840)
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:c29000aa3ac0f99b705ca374c045d5beff4177987e5a283bc92ccac0c6939c76
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:0f651c4f1c3ad52a01fbd47e52d11368ca8b08ba3fb48625efe3381d4f9250bb
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:d9027a747af71a82586612c8eab229df136889594e567858230fc8e56861a74b
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:d2e25d373d31655c7b2ae46c0ff8560a0f8f483db8e9911fd3b65fb9bf850132
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:bdb22b0e22cd1b2299fbf89ace2fe7aa1e3b8b75b8b634fc32ec0f6b899640c2
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:63be7391d0593410c95fe406ea9009d7f36971b7038c4d39283704d70cbf3d18
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:4d763a3b9ef3c4c24a522657b0814097ad1dd3c254189d8d4dab663bb3ef76a9
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:225494fe630fb798cd8e9c5a2a85e2e6d41d3fb0e58998d56897fc8fad5aab22
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els4.i686.rpm
    sha:e0bfbd58aa1ae479b4a56314fc16c9142bc04a7bc7010a1bba27d7167bfd4b3d
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els4.x86_64.rpm
    sha:8ffb477d6107acb55f4d6fc80bfe1c124217a5059e45025d3e9a0e6c59a76a2a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.