SUSE-SU-2026:2236-1

Опубликовано: 03 июн. 2026

Источник: suse-cvrf

Описание

Security update for vim

This update for vim fixes the following issues

CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim (bsc#1264706).
CVE-2026-43961: Vimscript Code Injection in netrw NetrwMarkFile() via crafted filename (bsc#1265349).
CVE-2026-44656: Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's: find command-line completion (bsc#1264707).
CVE-2026-45130: Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active (bsc#1264708).
CVE-2026-46483: command injection via tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems (bsc#1265360).

Changes for vim:

Update to v9.2.0530.
Fix for incorrectly detecting scientific parameter files as bitbake recipies. (bsc#1262395)

Список пакетов

Container suse/manager/5.0/x86_64/server:latest

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5:latest

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Azure-3P

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-Azure-Basic

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-Azure-Standard

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-CHOST-BYOS-Aliyun

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-CHOST-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-CHOST-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-CHOST-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-CHOST-BYOS-GDC

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-HPC-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-HPC-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-HPC-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-HPC-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-Hardened-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-Hardened-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-Hardened-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5-Azure

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5-BYOS

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5-BYOS-Azure

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5-BYOS-EC2

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5-BYOS-GCE

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5-EC2

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-Micro-5-5-GCE

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-Azure-3P

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-Hardened-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAP-Hardened-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAPCAL-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAPCAL-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP5-SAPCAL-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-Azure-3P

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-Azure-Basic

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-Azure-Standard

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-BYOS

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-CHOST-BYOS

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-CHOST-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-CHOST-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-CHOST-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-CHOST-BYOS-GDC

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-EC2-ECS-HVM

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC-BYOS

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-HPC-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-Hardened-BYOS

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-Hardened-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-Hardened-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-Hardened-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Azure-3P

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-BYOS

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened-BYOS

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAP-Hardened-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAPCAL

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAPCAL-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAPCAL-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP6-SAPCAL-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-Azure-3P

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-Azure-Basic

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-Azure-Standard

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-CHOST-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-CHOST-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-CHOST-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-CHOST-BYOS-GDC

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-EC2-ECS-HVM

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-HPC-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-HPC-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-HPC-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-HPC-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-Hardened-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-Hardened-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-Hardened-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-Azure-3P

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-Hardened-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAP-Hardened-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAPCAL-Azure

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAPCAL-EC2

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

Image SLES15-SP7-SAPCAL-GCE

vim-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

gvim-9.2.0530-150500.20.52.1

vim-9.2.0530-150500.20.52.1

vim-data-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

gvim-9.2.0530-150500.20.52.1

vim-9.2.0530-150500.20.52.1

vim-data-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

SUSE Linux Enterprise Micro 5.5

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

vim-9.2.0530-150500.20.52.1

vim-data-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

SUSE Linux Enterprise Module for Desktop Applications 15 SP7

gvim-9.2.0530-150500.20.52.1

SUSE Linux Enterprise Server 15 SP5-LTSS

gvim-9.2.0530-150500.20.52.1

vim-9.2.0530-150500.20.52.1

vim-data-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

SUSE Linux Enterprise Server 15 SP6-LTSS

gvim-9.2.0530-150500.20.52.1

vim-9.2.0530-150500.20.52.1

vim-data-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

gvim-9.2.0530-150500.20.52.1

vim-9.2.0530-150500.20.52.1

vim-data-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

gvim-9.2.0530-150500.20.52.1

vim-9.2.0530-150500.20.52.1

vim-data-9.2.0530-150500.20.52.1

vim-data-common-9.2.0530-150500.20.52.1

vim-small-9.2.0530-150500.20.52.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20262236-1/
Link for SUSE-SU-2026:2236-1
https://lists.suse.com/pipermail/sle-updates/2026-June/047094.html
E-Mail link for SUSE-SU-2026:2236-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1262395
SUSE Bug 1262395
https://bugzilla.suse.com/1264706
SUSE Bug 1264706
https://bugzilla.suse.com/1264707
SUSE Bug 1264707
https://bugzilla.suse.com/1264708
SUSE Bug 1264708
https://bugzilla.suse.com/1265349
SUSE Bug 1265349
https://bugzilla.suse.com/1265360
SUSE Bug 1265360
https://www.suse.com/security/cve/CVE-2026-42307/
SUSE CVE CVE-2026-42307 page
https://www.suse.com/security/cve/CVE-2026-43961/
SUSE CVE CVE-2026-43961 page
https://www.suse.com/security/cve/CVE-2026-44656/
SUSE CVE CVE-2026-44656 page
https://www.suse.com/security/cve/CVE-2026-45130/
SUSE CVE CVE-2026-45130 page
https://www.suse.com/security/cve/CVE-2026-46483/
SUSE CVE CVE-2026-46483 page

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the sftp:// or file:// protocol handlers), an attacker can execute arbitrary shell commands with the privileges of the Vim process. This issue has been patched in version 9.2.0383.

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0530-150500.20.52.1

Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-data-common-9.2.0530-150500.20.52.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-42307.html
CVE-2026-42307
https://bugzilla.suse.com/1264706
SUSE Bug 1264706

Описание

unknown

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0530-150500.20.52.1

Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-data-common-9.2.0530-150500.20.52.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-43961.html
CVE-2026-43961
https://bugzilla.suse.com/1265349
SUSE Bug 1265349

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's :find command-line completion. When the path option contains backtick-enclosed shell commands, those commands are executed during file name completion. Because the path option lacks the P_SECURE flag, it can be set from a modeline, allowing an attacker who controls the contents of a file to execute arbitrary shell commands when the user opens that file in Vim and triggers :find completion. This issue has been patched in version 9.2.0435.

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0530-150500.20.52.1

Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-data-common-9.2.0530-150500.20.52.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-44656.html
CVE-2026-44656
https://bugzilla.suse.com/1264707
SUSE Bug 1264707

Описание

Vim is an open source, command line text editor. Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active. An attacker-controlled length field in the spell file's compound section overflows a 32-bit signed integer multiplication, causing a small buffer to be allocated for a write loop that runs many iterations, overflowing the heap. Because the 'spelllang' option can be set from a modeline, a text file modeline can trigger spell file loading if a malicious .spl file has been planted on the runtimepath. This issue has been patched in version 9.2.0450.

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0530-150500.20.52.1

Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-data-common-9.2.0530-150500.20.52.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-45130.html
CVE-2026-45130
https://bugzilla.suse.com/1264708
SUSE Bug 1264708

Описание

Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in runtime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.

Затронутые продукты

Container suse/manager/5.0/x86_64/server:latest:vim-9.2.0530-150500.20.52.1

Container suse/manager/5.0/x86_64/server:latest:vim-data-common-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-9.2.0530-150500.20.52.1

Container suse/sle-micro/5.5/toolbox:latest:vim-data-common-9.2.0530-150500.20.52.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-46483.html
CVE-2026-46483
https://bugzilla.suse.com/1265360
SUSE Bug 1265360