[CLSA-2026:1774363216] vim: Fix of 3 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-03-24 14:40:20 UTC
Description:
- CVE-2026-28420: fix heap-buffer-overflow in :terminal when processing Unicode combining characters from supplementary planes - CVE-2026-28418: fix OOB read in Emacs tags parsing with overlong tag file - CVE-2026-28419: fix heap-buffer-underflow in Emacs tags parsing when delimiter appears at start of line
Updated packages:
  • vim-X11-8.2.2637-22.el9_6.1.tuxcare.els5.x86_64.rpm
    sha:c3fea554a40b6a3e00f63c7c3da3d13c3cb0ade9b3cfdd556d8c54ac4e102ac3
  • vim-common-8.2.2637-22.el9_6.1.tuxcare.els5.x86_64.rpm
    sha:4392d5407f29a3449e5f23412794a6d3fb05bbda00c290d9202e40200ecc89b4
  • vim-enhanced-8.2.2637-22.el9_6.1.tuxcare.els5.x86_64.rpm
    sha:312db40947f031d2f53c2015276fba0ae31bbb7eb614e726f8dc3e3e0fcf93c8
  • vim-filesystem-8.2.2637-22.el9_6.1.tuxcare.els5.noarch.rpm
    sha:f731c05910ebc4c178c3cd79a1429db647bf89eef653c04dd0131baf58c28b64
  • vim-minimal-8.2.2637-22.el9_6.1.tuxcare.els5.x86_64.rpm
    sha:328eba4a97ad2654edc0947125d49e50646fb3ec05c3f151ac403aa82597cbce
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.