Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1607-1

Опубликовано: 24 апр. 2026
Источник: suse-cvrf

Описание

Security update for vim

This update for vim fixes the following issues:

Update to version 9.2.0280.

  • CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271).
  • CVE-2026-34714: missing checks allow for a tabpanel modeline escape and can lead to arbitrary OS command execution (bsc#1261191).
  • CVE-2026-33412: improper escaping of newline characters allows for command injection in glob and can lead to arbitrary code execution (bsc#1259985).

Список пакетов

Container suse/manager/5.0/x86_64/server:latest
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Container suse/sle-micro/5.5/toolbox:latest
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Container suse/sle-micro/5.5:latest
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Azure-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-Azure-Basic
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-Azure-Standard
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-CHOST-BYOS-Aliyun
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-CHOST-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-CHOST-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-CHOST-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-CHOST-BYOS-GDC
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-CHOST-BYOS-SAP-CCloud
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-HPC-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-HPC-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-HPC-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-HPC-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-Hardened-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-Hardened-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-Hardened-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5-Azure
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5-BYOS
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5-BYOS-EC2
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5-EC2
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-Micro-5-5-GCE
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-Azure-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-Hardened-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAP-Hardened-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAPCAL-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAPCAL-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP5-SAPCAL-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-Azure-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-Azure-Basic
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-Azure-Standard
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-BYOS
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-CHOST-BYOS
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-CHOST-BYOS-Aliyun
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-CHOST-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-CHOST-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-CHOST-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-CHOST-BYOS-GDC
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-EC2-ECS-HVM
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC-BYOS
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-HPC-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-Hardened-BYOS
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-Hardened-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-Hardened-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-Hardened-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Azure-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-BYOS
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened-BYOS
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAP-Hardened-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAPCAL
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAPCAL-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAPCAL-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP6-SAPCAL-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-Azure-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-Azure-Basic
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-Azure-Standard
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-CHOST-BYOS-Aliyun
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-CHOST-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-CHOST-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-CHOST-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-CHOST-BYOS-GDC
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-EC2-ECS-HVM
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-GCE-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-HPC-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-HPC-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-HPC-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-HPC-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-Hardened-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-Hardened-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-Hardened-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-Azure-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-GCE-3P
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-Hardened-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAP-Hardened-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAPCAL-Azure
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAPCAL-EC2
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image SLES15-SP7-SAPCAL-GCE
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
Image server-image-sles15sp7
vim-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
gvim-9.2.0280-150500.20.46.1
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
gvim-9.2.0280-150500.20.46.1
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
SUSE Linux Enterprise Micro 5.5
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7
gvim-9.2.0280-150500.20.46.1
SUSE Linux Enterprise Server 15 SP5-LTSS
gvim-9.2.0280-150500.20.46.1
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
SUSE Linux Enterprise Server 15 SP6-LTSS
gvim-9.2.0280-150500.20.46.1
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
gvim-9.2.0280-150500.20.46.1
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
gvim-9.2.0280-150500.20.46.1
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1
openSUSE Leap 15.6
gvim-9.2.0280-150500.20.46.1
vim-9.2.0280-150500.20.46.1
vim-data-9.2.0280-150500.20.46.1
vim-data-common-9.2.0280-150500.20.46.1
vim-small-9.2.0280-150500.20.46.1

Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.

Затронутые продукты
Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0280-150500.20.46.1
Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0280-150500.20.46.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:vim-9.2.0280-150500.20.46.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:vim-data-common-9.2.0280-150500.20.46.1
Ссылки

Описание

Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.

Затронутые продукты
Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0280-150500.20.46.1
Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0280-150500.20.46.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:vim-9.2.0280-150500.20.46.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:vim-data-common-9.2.0280-150500.20.46.1
Ссылки

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.

Затронутые продукты
Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0280-150500.20.46.1
Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0280-150500.20.46.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:vim-9.2.0280-150500.20.46.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:vim-data-common-9.2.0280-150500.20.46.1
Ссылки
Уязвимость SUSE-SU-2026:1607-1