[CLSA-2026:1794145369] vim: Fix of CVE-2026-35177
Type:
security
Severity:
Important
Release date:
2026-11-08 13:43:00 UTC
Description:
- CVE-2026-35177: fix path traversal in the zip.vim plugin - reject a write whose target escapes the archive directory after simplify() normalization (upstream 9.2.0280)
CVEs fixed:
Updated packages:
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:c33ac7cc7105aac53b63e271b3b67271d4343c47b7c13c443fe013984a43ee02
  • vim-X11-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:a98dfabae581b579ecda5216f427d767858384aad7aea27a70b8ffef31e2d02e
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:4725cce13a49a52f82282cc8f76946cb256da4a13b14d1faea67ba647bf62543
  • vim-common-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:a51ae116583a45284600f56888e3069c10e53405f99416afbc0a58829355edaa
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:b286f4826e03af492a6056d4c08e5bccdb6494d2bf53b9f751c7edd11e0dafb5
  • vim-enhanced-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:3d5a29803990a1565002a81341436ffc9f0102f6977e36e215a342589ab21330
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:157d239223cb32dc1552f4036ec2daba9127b6f71e80475584db3a95ec4dc06f
  • vim-filesystem-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:ce03db6c5dde123b2c1763aa4ab472b75bec5b805640f9484aee13bd348a720f
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.i686.rpm
    sha:c0e8031cc2e2752960d6f6dfc0ea7a4696c8e550770ebc01fd7666dc44c52207
  • vim-minimal-7.4.629-8.0.3.el7_9.tuxcare.els5.x86_64.rpm
    sha:1051e43aed8aff042dac0e28b6aa121e0006d4890c0e81ccc1713f6d0f6e84be
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.