gpp_maybe Security update for vim

SUSE-SLE-Micro-5.3-2026-1387

This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow for a `tabpanel` modeline escape and can lead to arbitrary OS command execution (bsc#1261191). - CVE-2026-33412: improper escaping of newline characters allows for command injection in `glob` and can lead to arbitrary code execution (bsc#1259985).

• Release Date
  Apr 16 2026
• References
  Bugzilla: 1261191, 1261271, 1259985
  CVEs: CVE-2026-33412, CVE-2026-34714, CVE-2026-34982
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.3 aarch64

• Packages
  vim
  Vi IMproved

  9.2.0280-150000.5.89.1 lock src

  vim-data-common
  Common Data files for vim&gvim

  9.2.0280-150000.5.89.1 lock rpm

  vim-small
  Vim with reduced features

  9.2.0280-150000.5.89.1 lock rpm

SUSE Linux Enterprise Micro 5.3 s390x

• Packages
  vim
  Vi IMproved

  9.2.0280-150000.5.89.1 lock src

  vim-data-common
  Common Data files for vim&gvim

  9.2.0280-150000.5.89.1 lock rpm

  vim-small
  Vim with reduced features

  9.2.0280-150000.5.89.1 lock rpm

SUSE Linux Enterprise Micro 5.3 x86_64

• Packages
  vim
  Vi IMproved

  9.2.0280-150000.5.89.1 lock src

  vim-data-common
  Common Data files for vim&gvim

  9.2.0280-150000.5.89.1 lock rpm

  vim-small
  Vim with reduced features

  9.2.0280-150000.5.89.1 lock rpm