Описание
Security update for vim
This update for vim fixes the following issues:
- CVE-2026-33412: command injection via newline in glob() (bsc#1259985).
- CVE-2026-34714: crafted file can allow code execution (bsc#1261191).
- CVE-2026-34982: Vim modeline bypass via various options (bsc#1261271).
Список пакетов
openSUSE Leap 16.0
Ссылки
- SUSE Security Ratings
- SUSE Bug 1259985
- SUSE Bug 1261191
- SUSE Bug 1261271
- SUSE CVE CVE-2026-33412 page
- SUSE CVE CVE-2026-34714 page
- SUSE CVE CVE-2026-34982 page
Описание
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.
Затронутые продукты
Ссылки
- CVE-2026-33412
- SUSE Bug 1259985
Описание
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.
Затронутые продукты
Ссылки
- CVE-2026-34714
- SUSE Bug 1261191
Описание
Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.
Затронутые продукты
Ссылки
- CVE-2026-34982
- SUSE Bug 1261271