Release date:
2026-11-12 19:57:01 UTC
Description:
- CVE-2026-73073: arbitrary Ex command execution during C omni-completion via an
unclosed "[" in the tags typeref (runtime/autoload/ccomplete.vim, upstream
patch 9.2.0845)
- CVE-2026-73073: also "|" in tag file names, GHSA-r77m-8m55-rpr6 (no CVE
assigned yet; runtime/autoload/ccomplete.vim, upstream patch 9.2.1011)
- CVE-2026-43961: code injection via the netrw mf command through a crafted file
name interpolated into filter() (runtime/autoload/netrw.vim, upstream patch
9.2.0480)
Updated packages:
-
vim-X11-8.0.1763-19.el8.4.tuxcare.els24.i686.rpm
sha:e3cea1ad26cb70403e9e96f112c1e99960929710899866a487723f06c6f5e036
-
vim-X11-8.0.1763-19.el8.4.tuxcare.els24.x86_64.rpm
sha:cda64287022680e9730d092b4555f2762d9a307b1267386a846e4b60154d9a3c
-
vim-common-8.0.1763-19.el8.4.tuxcare.els24.i686.rpm
sha:ab5594de77b7e7ec103d8ffadc27a7b0c95988074ff70d5ca2344c88093e849c
-
vim-common-8.0.1763-19.el8.4.tuxcare.els24.x86_64.rpm
sha:00a9f34fb55ae13ceeb1eccca49a2766617a0a7910ad2eb1e8ec1adad73be961
-
vim-enhanced-8.0.1763-19.el8.4.tuxcare.els24.i686.rpm
sha:939b0481fc2ab38c95b4e2b3320021dc8e07fc0e65f90e74fcdefabb4b7024ea
-
vim-enhanced-8.0.1763-19.el8.4.tuxcare.els24.x86_64.rpm
sha:3f2fb1d032987a5d15d1a5982cc83dc5188ae479c6eee8a967076544531bb204
-
vim-filesystem-8.0.1763-19.el8.4.tuxcare.els24.noarch.rpm
sha:12b81a3c96a223d1fb250ebcb46eec34f0ee3f2419829b32148a1fea5bd16ae4
-
vim-minimal-8.0.1763-19.el8.4.tuxcare.els24.i686.rpm
sha:69d972a06c0c01e69b8ed29c3fb11cd861babe965b4cb2b59f308faf3d9920f6
-
vim-minimal-8.0.1763-19.el8.4.tuxcare.els24.x86_64.rpm
sha:db184b3bc2cb0be8b7b966b26e6f0279489679f94b3d5572ec628071c26395b8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
