Release date:
2026-07-23 09:42:17 UTC
Description:
* SECURITY UPDATE: arbitrary Ex command execution during C omni-completion:
the C omni-completion script interpolated the typeref/typename tag field
of a tags entry, without escaping, into a :vimgrep pattern run through
:execute. Because :vimgrep honours the bar as a command separator, a
crafted tag field could close the search pattern and append an arbitrary
Ex command, which ran when C omni-completion was invoked on a hostile .c
file whose project tags file carried such an entry.
- debian/patches/CVE-2026-59858.patch: escape the type field with
escape(typename, '/\') before building the :vimgrep pattern in
s:StructMembers(), in runtime/autoload/ccomplete.vim; matches upstream
patch 9.2.0735.
- CVE-2026-59858
Updated packages:
-
vim_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:c3240f27958df51602b71fdcf8825dfde1aa055c
-
vim-athena_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:4434cce0fb751471b377f3d0156829d2275ce8ac
-
vim-athena-py2_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:f62fcd163a63681d3a7cc0117c11766a40364797
-
vim-common_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:c81a0daf594714bcc7463f1a1790bf342be14b18
-
vim-doc_7.4.1689-3ubuntu1.5+tuxcare.els71_all.deb
sha:c571780a3dfea15ace64d3bc5367bafe21fa1026
-
vim-gnome_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:b9e6a329dfaa7e0360d47eabafb4bca7593320bf
-
vim-gnome-py2_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:6ecc5f34b4a145d28ebe4a925841ce70edf9e5fe
-
vim-gtk_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:ce9906a0c55281dd86e034d7e619c1a79016ff4d
-
vim-gtk-py2_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:d61f88e332798743d400b71843151a60fa6d3763
-
vim-gtk3_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:f106821780ee6c4b4bdc0419fc10023ccafd259b
-
vim-gtk3-py2_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:228c9a3cd189fb325aafbc7f989cd85eedd5500b
-
vim-gui-common_7.4.1689-3ubuntu1.5+tuxcare.els71_all.deb
sha:cd8ac66be805cac871ced852c222a90bfbfaf0a3
-
vim-nox_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:302337bfb6660b94549513e5cc16170ba9d0248b
-
vim-nox-py2_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:462f2eb3f4a1ca5a905a170747a6dc2d4ebf82d2
-
vim-runtime_7.4.1689-3ubuntu1.5+tuxcare.els71_all.deb
sha:1c0af8085e4d5f12e84f9aa49ce0d6d62bc5f3fd
-
vim-tiny_7.4.1689-3ubuntu1.5+tuxcare.els71_amd64.deb
sha:df651d8a62fc2d240fbc07362c4a1d0a46a5d46c
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
