{"id":"CLSA-2026-1792153017","summary":"vim: Fix of 91 CVEs","details":"- CVE-2026-73072: fix heap buffer overflow in set_sofo() with a crafted spell file (upstream 9.2.0846)\n- CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries (upstream 9.2.0840)","modified":"2026-10-26T09:31:59.326499846Z","published":"2026-10-16T12:18:21Z","upstream":["CVE-2026-73072","CVE-2026-73078"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792153017.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3778"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3796"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3872"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3903"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3927"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3928"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3973"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3974"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3984"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4019"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4069"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4166"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4192"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0351"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0359"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0368"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0413"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0943"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1154"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1616"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1619"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1620"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1629"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1720"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1735"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1796"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1897"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1898"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1968"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2124"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2125"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2126"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2129"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2175"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2182"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2183"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2206"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2207"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2210"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2257"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2264"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2284"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2285"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2286"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2287"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2289"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2343"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2344"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2345"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2571"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2581"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2845"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2849"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3037"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3234"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3235"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3296"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3352"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3520"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3591"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3705"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4292"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0049"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0054"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0288"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0433"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2610"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4733"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4750"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4751"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5344"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22667"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25749"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-26269"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28417"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-28421"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33412"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34982"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39881"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41411"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46483"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47162"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52858"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52860"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55693"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57455"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57456"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59858"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73072"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73076"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73078"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/vim-X11?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792153017.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/vim-common?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792153017.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792153017.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792153017.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/vim-minimal?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:7.4.629-8.0.3.el7_9.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792153017.json"}}],"schema_version":"1.9.0"}