gpp_maybe
Security update for vim
SUSE-SLE-Micro-6.1-557
This update for vim fixes the following issues - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim (bsc#1264706). - CVE-2026-43961: Vimscript Code Injection in netrw NetrwMarkFile() via crafted filename (bsc#1265349). - CVE-2026-44656: Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's: find command-line completion (bsc#1264707). - CVE-2026-45130: Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active (bsc#1264708). - CVE-2026-46483: command injection via ` tar#Vimuntar()` in `runtime/autoload/tar.vim` when decompressing `.tgz` archives on Unix-like systems (bsc#1265360). Changes for vim: - Update to v9.2.0530. - Fix for incorrectly detecting scientific parameter files as bitbake recipies. (bsc#1262395)
-
Release DateJun 1 2026
-
ReferencesBugzilla: 1262395, 1264706, 1264707, 1264708, 1265349, 1265360
CVEs: CVE-2026-42307, CVE-2026-43961, CVE-2026-44656, CVE-2026-45130, CVE-2026-46483 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Micro 6.1 x86_64
-
Packagesvim-data-common
Common Data files for vim&gvimvim-small9.2.0530-slfo.1.1_1.1 lock rpm
Vim with reduced features9.2.0530-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 aarch64
-
Packagesvim-data-common
Common Data files for vim&gvimvim-small9.2.0530-slfo.1.1_1.1 lock rpm
Vim with reduced features9.2.0530-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 ppc64le
-
Packagesvim-data-common
Common Data files for vim&gvimvim-small9.2.0530-slfo.1.1_1.1 lock rpm
Vim with reduced features9.2.0530-slfo.1.1_1.1 lock rpm
SUSE Linux Micro 6.1 s390x
-
Packagesvim-data-common
Common Data files for vim&gvimvim-small9.2.0530-slfo.1.1_1.1 lock rpm
Vim with reduced features9.2.0530-slfo.1.1_1.1 lock rpm