[CLSA-2026:1782223154] vim: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-06-23 13:59:32 UTC
Description:
- CVE-2026-52858: disable execution of import/from statements harvested from the buffer during python omni-completion (pythoncomplete/python3complete), gated behind the opt-in g:pythoncomplete_allow_import (upstream 9.2.0561 and 9.2.0568) - CVE-2026-52860: strip parameter default values and annotations and whitelist class base expressions before exec() of reconstructed function/class source in python omni-completion (upstream 9.2.0597)
Updated packages:
  • vim-X11-7.4.629-8.0.1.el7_9.tuxcare.els21.x86_64.rpm
    sha:471d40b02677f352cf2fb59e91f369ea3e530bead7bc1d389981a86a61887639
  • vim-common-7.4.629-8.0.1.el7_9.tuxcare.els21.x86_64.rpm
    sha:0e3b7ed3ebd7ebdea732acd5b2f54626206fda18c7da427141f6a6f457b096b9
  • vim-enhanced-7.4.629-8.0.1.el7_9.tuxcare.els21.x86_64.rpm
    sha:0e1df4dbc6915a54d6a88b8bc9197b87a64b73b1226cc67780d8fd07ae148428
  • vim-filesystem-7.4.629-8.0.1.el7_9.tuxcare.els21.x86_64.rpm
    sha:c5f55e57feea9aca7c774bb25a5d7f6d344017d4cb61584f193f9192dad6a31c
  • vim-minimal-7.4.629-8.0.1.el7_9.tuxcare.els21.x86_64.rpm
    sha:3dd6ce131f7b0604286ddc619c0b943f27c8a4b1e01311c8ad6fa9018fc4cffb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.