gpp_maybe Security update for vim

SUSE-SLE-Module-Desktop-Applications-15-SP7-2026-2236

This update for vim fixes the following issues - CVE-2026-42307: Prior to version 9.2.0383, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim (bsc#1264706). - CVE-2026-43961: Vimscript Code Injection in netrw NetrwMarkFile() via crafted filename (bsc#1265349). - CVE-2026-44656: Prior to version 9.2.0435, an OS command injection vulnerability exists in Vim's: find command-line completion (bsc#1264707). - CVE-2026-45130: Prior to version 9.2.0450, a heap buffer overflow exists in read_compound() in src/spellfile.c when loading a crafted spell file (.spl) with UTF-8 encoding active (bsc#1264708). - CVE-2026-46483: command injection via ` tar#Vimuntar()` in `runtime/autoload/tar.vim` when decompressing `.tgz` archives on Unix-like systems (bsc#1265360). Changes for vim: - Update to v9.2.0530. - Fix for incorrectly detecting scientific parameter files as bitbake recipies. (bsc#1262395)

Release Date

Jun 3 2026
References

Bugzilla: 1262395, 1264706, 1264707, 1264708, 1265349, 1265360
CVEs: CVE-2026-42307, CVE-2026-43961, CVE-2026-44656, CVE-2026-45130, CVE-2026-46483
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Desktop Applications Module 15.7 ppc64le

Packages

gvim
A GUI for Vi

9.2.0530-150500.20.52.1 lock rpm

vim
Vi IMproved

9.2.0530-150500.20.52.1 lock src

Desktop Applications Module 15.7 s390x

Packages

gvim
A GUI for Vi

9.2.0530-150500.20.52.1 lock rpm

vim
Vi IMproved

9.2.0530-150500.20.52.1 lock src

Desktop Applications Module 15.7 aarch64

Packages

gvim
A GUI for Vi

9.2.0530-150500.20.52.1 lock rpm

vim
Vi IMproved

9.2.0530-150500.20.52.1 lock src

Desktop Applications Module 15.7 x86_64

Packages

gvim
A GUI for Vi

9.2.0530-150500.20.52.1 lock rpm

vim
Vi IMproved

9.2.0530-150500.20.52.1 lock src