CentOS Linux 6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS6:CLSA-2026:1784042868)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1784042868 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates...

CentOS Linux 7 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (CENTOS7:CLSA-2026:1786353169)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1786353169 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates...

CLSA-2026-1789136288 Fix CVE(s): CVE-2026-73073

SECURITY UPDATE: Arbitrary Ex command execution during C omni-completion: s:StructMembers in runtime/autoload/ccomplete.vim interpolates a tags-file typeref/typename value into a :vimgrep pattern with only "/" and "" escaped, so an unclosed "" makes vimgrep pattern skipping fail and a following...

CLSA-2026-1788182469 Fix CVE(s): CVE-2026-73073

SECURITY UPDATE: arbitrary Ex command execution during C omni-completion: escaping only "/" and "\" in the typeref/typename tag field was not enough. With no "/" in the payload an unclosed "" makes :vimgrep's pattern skipping fail, after which the command parser treats a following "|" as a comman...

CLSA-2026-1786353169 vim: Fix of CVE-2026-59858

CVE-2026-59858: escape the typeref/typename tags field before interpolating it into the :vimgrep pattern in ccomplete.vim s:StructMembers, preventing arbitrary Ex command execution during C omni-completion upstream 9.2.0735...

Oracle Linux 8 : vim (ELSA-2026-48703)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-48703 advisory. - RHEL-203873 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-194055 CVE-2026-55693 vim: out-of-bounds write in...

CLSA-2026-1784807557 vim: Fix of CVE-2026-59858

CVE-2026-59858: escape the typeref/typename tags field before interpolating it into the :vimgrep pattern in ccomplete.vim s:StructMembers, preventing arbitrary Ex command execution during C omni-completion upstream 9.2.0735...

CLSA-2026-1784802165 vim: Fix of CVE-2026-59858

CVE-2026-59858: fix arbitrary Ex command execution during C omni-completion; the typeref/typename tag field was interpolated unescaped into a :vimgrep pattern run via :execute, letting a crafted tags file close the pattern and append an Ex command; escape the type field with escapetypename, '/'...

CLSA-2026-1784799711 Fix CVE(s): CVE-2026-59858

SECURITY UPDATE: arbitrary Ex command execution during C omni-completion: the C omni-completion script interpolated the typeref/typename tag field of a tags entry, without escaping, into a :vimgrep pattern run through :execute. Because :vimgrep honours the bar as a command separator, a crafted ta...

CLSA-2026-1784799471 vim: Fix of CVE-2026-59858

CVE-2026-59858: fix arbitrary Ex command execution during C omni-completion; the typeref/typename tag field was interpolated unescaped into a :vimgrep pattern run via :execute, letting a crafted tags file close the pattern and append an Ex command; escape the type field with escapetypename, '/'...

CLSA-2026-1784799349 vim: Fix of CVE-2026-59858

CVE-2026-59858: fix arbitrary Ex command execution during C omni-completion; the typeref/typename tag field was interpolated unescaped into a :vimgrep pattern run via :execute, letting a crafted tags file close the pattern and append an Ex command; escape the type field with escapetypename, '/'...

CLSA-2026-1784042868 vim: Fix of CVE-2026-59858

CVE-2026-59858: fix arbitrary Ex command execution in C omni-completion by escaping the typeref/typename tag field before inserting it into the :vimgrep pattern in ccomplete.vim upstream 9.2.0735...

CLSA-2026-1784038367 vim: Fix of CVE-2026-59858

CVE-2026-59858: fix arbitrary Ex command execution in C omni-completion by escaping the typeref/typename tag field before inserting it into the :vimgrep pattern in ccomplete.vim upstream 9.2.0735...

CLSA-2026-1784036814 Fix CVE(s): CVE-2026-59858

SECURITY UPDATE: Arbitrary Ex command execution during C omni-completion: the typeref/typename tag field is interpolated unescaped into the :vimgrep pattern in s:StructMembers in runtime/autoload/ccomplete.vim, so a crafted tags file can close the search pattern and append an arbitrary Ex command...