A new updated vim package within CloudLinux OS 6 ELS has been scheduled for gradual rollout from our production repository.

Rollout slot: 5
Rolled out to: 0.1%
ETA for 100% rollout: November 22

Changelog

vim-7.4.629-7.el6.cloudlinux.els

• Fix illegal memory access if buffer name is very long (CVE-2021-3872)
• Fix ml_get error after search with range (CVE-2021-3875)
• Fix invalid memory access when scrolling without a valid screen (CVE-2021-3903)

Update command

yum update vim*

Immediate update (via bypass)

yum update vim* --enablerepo=cloudlinux-rollout-5-bypass