[CLSA-2026:1789466646] vim: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-15 10:04:19 UTC
Description:
- CVE-2026-73072: reset sl_sal_first[] in set_sofo() so a spell file with an SN_SAL section before an SN_SOFO section cannot under-count the mapping lists and write past the allocation - CVE-2026-73076: forbid a .VimballRecord member filename and only execute well-formed delete commands when removing a vimball - CVE-2026-73078: escape the Ex command separator when netrw builds the Bookmarks, History and Targets menus
Updated packages:
  • vim-X11-8.2.2637-22.el9_6.1.tuxcare.els41.x86_64.rpm
    sha:2cc8cdde2f8507611ae64363b8a484e8a30123172446a35d35b5017bb71e3675
  • vim-common-8.2.2637-22.el9_6.1.tuxcare.els41.x86_64.rpm
    sha:8c2077b6b895e8749d6dfc158698d89f4fbafae92c86ab8c1a0fef1adaa39ebc
  • vim-enhanced-8.2.2637-22.el9_6.1.tuxcare.els41.x86_64.rpm
    sha:67a224d14c4240bee43b46b9848a4dab733a71de002fc2afaa9f4e558bf814f0
  • vim-filesystem-8.2.2637-22.el9_6.1.tuxcare.els41.noarch.rpm
    sha:d233e1af4aba4c6ff94e11ecb21b19bbbad2067216c8d1fae086ebfe86828fb6
  • vim-minimal-8.2.2637-22.el9_6.1.tuxcare.els41.x86_64.rpm
    sha:70faaf4a4d687ffd470f8a59c379200a142112a4c956b15b5c942b664089cd5f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.