gpp_maybe Security update for vim

SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-1607

This update for vim fixes the following issues: Update to version 9.2.0280. - CVE-2026-34982: missing input validation allows for a modeline sandbox bypass and can lead to arbitrary OS command execution (bsc#1261271). - CVE-2026-34714: missing checks allow for a `tabpanel` modeline escape and can lead to arbitrary OS command execution (bsc#1261191). - CVE-2026-33412: improper escaping of newline characters allows for command injection in `glob` and can lead to arbitrary code execution (bsc#1259985).

• Release Date
  Apr 24 2026
• References
  Bugzilla: 1259985, 1261271, 1261191
  CVEs: CVE-2026-34982, CVE-2026-34714, CVE-2026-33412
• Type
  security
• Severity
  important

cloud_download Downloads

Desktop Applications Module 15.7 aarch64

• Packages
  gvim
  A GUI for Vi

  9.2.0280-150500.20.46.1 lock rpm

  vim
  Vi IMproved

  9.2.0280-150500.20.46.1 lock src

Desktop Applications Module 15.7 ppc64le

• Packages
  gvim
  A GUI for Vi

  9.2.0280-150500.20.46.1 lock rpm

  vim
  Vi IMproved

  9.2.0280-150500.20.46.1 lock src

Desktop Applications Module 15.7 s390x

• Packages
  gvim
  A GUI for Vi

  9.2.0280-150500.20.46.1 lock rpm

  vim
  Vi IMproved

  9.2.0280-150500.20.46.1 lock src

Desktop Applications Module 15.7 x86_64

• Packages
  gvim
  A GUI for Vi

  9.2.0280-150500.20.46.1 lock rpm

  vim
  Vi IMproved

  9.2.0280-150500.20.46.1 lock src