Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1051-1

Опубликовано: 08 апр. 2026
Источник: suse-cvrf

Описание

Security update for vim

This update for vim fixes the following issues:

Update Vim to version 9.2.0110:

  • CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602).
  • CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229).
  • CVE-2026-28417: Fixed that a crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
  • CVE-2026-28418: Fixed that a malformed tags file can cause an heap-based buffer overflow out-of-bounds read (bsc#1259052)
  • CVE-2026-28419: Fixed processing a malformed tags file containing a delimiter can lead to a crash (bsc#1259053)
  • CVE-2026-28420: Fixed that processing maximum combining characters in terminal emulator can lead to heap-based buffer overflow write (bsc#1259054)
  • CVE-2026-28421: Fixed that a crafted swap file can cause a heap-buffer-overflow and a segmentation fault
  • CVE-2026-28422: Fixed that a malicious modeline or plugin can trigger a stack-buffer-overflow (bsc#1259056)

Список пакетов

Image SLES12-SP5-Azure-BYOS
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-SAP-BYOS
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-SAP-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-Standard-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-EC2-BYOS
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-EC2-ECS-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-EC2-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-EC2-SAP-BYOS
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-EC2-SAP-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-GCE-BYOS
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-GCE-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-GCE-SAP-BYOS
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-GCE-SAP-On-Demand
vim-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
SUSE Linux Enterprise Server 12 SP5-LTSS
gvim-9.2.0110-17.59.1
vim-9.2.0110-17.59.1
vim-data-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
gvim-9.2.0110-17.59.1
vim-9.2.0110-17.59.1
vim-data-9.2.0110-17.59.1
vim-data-common-9.2.0110-17.59.1

Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. However, successfully exploitation can lead to overwriting sensitive files or placing executable code in privileged locations, depending on the permissions of the process editing the archive. The victim must edit such a file using Vim which will reveal the filename and the file content, a careful user may suspect some strange things going on. Successful exploitation could results in the ability to execute arbitrary commands on the underlying operating system. Version 9.1.1551 contains a patch for the vulnerability.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки

Описание

Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки

Описание

Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.

Затронутые продукты
Image SLES12-SP5-Azure-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-BYOS:vim-data-common-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-9.2.0110-17.59.1
Image SLES12-SP5-Azure-HPC-BYOS:vim-data-common-9.2.0110-17.59.1
Ссылки
Уязвимость SUSE-SU-2026:1051-1