Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2026-15474

Высокий

ALT-PU-2026-15474: package vim update to version 9.2.1067-alt1

Источник
errata.altlinux.org
Дата публикации
17.09.2026
Дата обновления
17.10.2026
Устраненные уязвимости
16

ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades vim to version 9.2.1067-alt1.

Устраненные уязвимости16

Связанные уязвимости

CVSS3: 8.8
altlinux
около 2 месяцев назад

ALT-PU-2026-15284: package `vim` update to version 9.2.1067-alt1

suse-cvrf
2 месяца назад

Security update for vim

CVSS3: 5.5
ubuntu
3 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing descriptors to overflow fd_set structures in src/channel.c and fixed-size struct pollfd arrays in src/os_unix.c, which allows a local process that can connect to the server socket to corrupt stack memory or terminate the Vim server. This issue is fixed in version 9.2.0842.

CVSS3: 5.5
redhat
3 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing descriptors to overflow fd_set structures in src/channel.c and fixed-size struct pollfd arrays in src/os_unix.c, which allows a local process that can connect to the server socket to corrupt stack memory or terminate the Vim server. This issue is fixed in version 9.2.0842.

CVSS3: 5.5
nvd
3 месяца назад

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing descriptors to overflow fd_set structures in src/channel.c and fixed-size struct pollfd arrays in src/os_unix.c, which allows a local process that can connect to the server socket to corrupt stack memory or terminate the Vim server. This issue is fixed in version 9.2.0842.