SUSE-SU-2026:1387-1

Опубликовано: 16 апр. 2026

Источник: suse-cvrf

Описание

Security update for vim

This update for vim fixes the following issues:

Update to version 9.2.0280.

CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271).
CVE-2026-34714: missing checks allow for a tabpanel modeline escape and can lead to arbitrary OS command execution (bsc#1261191).
CVE-2026-33412: improper escaping of newline characters allows for command injection in glob and can lead to arbitrary code execution (bsc#1259985).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.3:latest

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.4:latest

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Container suse/sle-micro/5.2/toolbox:latest

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro/5.3/toolbox:latest

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro/5.4/toolbox:latest

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-BYOS-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-BYOS-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-BYOS-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-CHOST-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-CHOST-BYOS-Aliyun

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-CHOST-BYOS-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-CHOST-BYOS-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-CHOST-BYOS-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-HPC-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-HPC-BYOS-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-HPC-BYOS-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-HPC-BYOS-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-HPC-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-HPC-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-Hardened-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-Hardened-BYOS-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-Hardened-BYOS-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-Hardened-BYOS-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-Micro-5-3-BYOS

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Image SLES15-SP4-Micro-5-4-BYOS

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-BYOS-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-BYOS-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-BYOS-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Hardened

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Hardened-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Hardened-BYOS

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAP-Hardened-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAPCAL

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAPCAL-Azure

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAPCAL-EC2

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

Image SLES15-SP4-SAPCAL-GCE

vim-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

gvim-9.2.0280-150000.5.89.1

vim-9.2.0280-150000.5.89.1

vim-data-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

gvim-9.2.0280-150000.5.89.1

vim-9.2.0280-150000.5.89.1

vim-data-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

SUSE Linux Enterprise Micro 5.2

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

SUSE Linux Enterprise Micro 5.3

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

SUSE Linux Enterprise Micro 5.4

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

SUSE Linux Enterprise Server 15 SP4-LTSS

gvim-9.2.0280-150000.5.89.1

vim-9.2.0280-150000.5.89.1

vim-data-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

gvim-9.2.0280-150000.5.89.1

vim-9.2.0280-150000.5.89.1

vim-data-9.2.0280-150000.5.89.1

vim-data-common-9.2.0280-150000.5.89.1

vim-small-9.2.0280-150000.5.89.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261387-1/
Link for SUSE-SU-2026:1387-1
https://lists.suse.com/pipermail/sle-updates/2026-April/045614.html
E-Mail link for SUSE-SU-2026:1387-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1259985
SUSE Bug 1259985
https://bugzilla.suse.com/1261191
SUSE Bug 1261191
https://bugzilla.suse.com/1261271
SUSE Bug 1261271
https://www.suse.com/security/cve/CVE-2026-33412/
SUSE CVE CVE-2026-33412 page
https://www.suse.com/security/cve/CVE-2026-34714/
SUSE CVE CVE-2026-34714 page
https://www.suse.com/security/cve/CVE-2026-34982/
SUSE CVE CVE-2026-34982 page

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.2:latest:vim-small-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.3:latest:vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.3:latest:vim-small-9.2.0280-150000.5.89.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-33412.html
CVE-2026-33412
https://bugzilla.suse.com/1259985
SUSE Bug 1259985
https://bugzilla.suse.com/1262591
SUSE Bug 1262591

Описание

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.2:latest:vim-small-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.3:latest:vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.3:latest:vim-small-9.2.0280-150000.5.89.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-34714.html
CVE-2026-34714
https://bugzilla.suse.com/1261191
SUSE Bug 1261191
https://bugzilla.suse.com/1262396
SUSE Bug 1262396
https://bugzilla.suse.com/1264728
SUSE Bug 1264728

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.

Затронутые продукты

Container suse/sle-micro-rancher/5.2:latest:vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.2:latest:vim-small-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.3:latest:vim-data-common-9.2.0280-150000.5.89.1

Container suse/sle-micro-rancher/5.3:latest:vim-small-9.2.0280-150000.5.89.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-34982.html
CVE-2026-34982
https://bugzilla.suse.com/1261271
SUSE Bug 1261271

SUSE-SU-2026:1387-1

Описание

Список пакетов

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Container suse/sle-micro/5.2/toolbox:latest

Container suse/sle-micro/5.3/toolbox:latest

Container suse/sle-micro/5.4/toolbox:latest

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS

Image SLES15-SP4-CHOST-BYOS-Aliyun

Image SLES15-SP4-CHOST-BYOS-Azure

Image SLES15-SP4-CHOST-BYOS-EC2

Image SLES15-SP4-CHOST-BYOS-GCE

Image SLES15-SP4-CHOST-BYOS-SAP-CCloud

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-Micro-5-3-BYOS

Image SLES15-SP4-Micro-5-3-BYOS-Azure

Image SLES15-SP4-Micro-5-4-BYOS

Image SLES15-SP4-Micro-5-4-BYOS-Azure

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

Ссылки

Уязвимость: CVE-2026-33412

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-34714

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2026-34982

Описание

Затронутые продукты

Ссылки