{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: stack-based buffer overflow in option callback\n functions: illegal_char() and did_set_string_option() wrote the\n E539/E526/E535 option errors into the caller's 80-byte errbuf[] with\n unbounded sprintf(). The call site reported upstream,\n did_set_langmap() in src/map.c, does not exist in this version, where\n 'langmap' errors are reported through EMSG2() into a bounded buffer.\n - debian/patches/CVE-2024-22667.patch: introduce ERR_BUFLEN and use\n snprintf() bounded by it at the three sprintf() sites, in\n src/option.c and src/option.h; matches upstream patch 9.0.2142.\n - CVE-2024-22667\n * SECURITY UPDATE: buffer overflow in 'helpfile' option handling:\n get_tagfname() copied the user-controlled 'helpfile' value into a\n MAXPATHL buffer with STRCPY() and then appended \"tags\" at the tail, so\n an over-long 'helpfile' overflowed the buffer.\n - debian/patches/CVE-2026-25749.patch: bound the copy with\n vim_strncpy() leaving room for the \"tags\" suffix, in src/tag.c;\n matches upstream patches 9.1.2132 and 9.1.2133.\n - CVE-2026-25749\n * SECURITY UPDATE: buffer overflow in the netbeans specialKeys command:\n special_keys() walked the modifier prefix writing two bytes per\n modifier into the 64-byte keybuf[] with no bound, so a long modifier\n run overflowed it.\n - debian/patches/CVE-2026-26269.patch: stop the modifier loop while\n i + 2 < KEYBUFLEN, in src/netbeans.c; matches upstream patch\n 9.1.2148.\n - CVE-2026-26269\n * SECURITY UPDATE: command injection via netrw URIs: the hostname and\n port taken from a netrw URI were interpolated unescaped into the\n command passed to system(), so shell metacharacters in the host or\n port ran arbitrary commands.\n - debian/patches/CVE-2026-28417.patch: validate the host against an\n RFC1123 hostname / IPv4 / IPv6 pattern at the four netrw entry\n points and shellescape() the host, user and port in s:MakeSshCmd(),\n in runtime/autoload/netrw.vim; matches upstream patches 9.2.0073,\n 9.2.0089 and 9.2.0553.\n - CVE-2026-28417\n * SECURITY UPDATE: crash and huge allocation recovering a corrupted swap\n file: ml_recover() trusted pe_page_count, pe_bnum, pe_old_lnum and\n pe_line_count from the swap file, so bogus values caused a multi-GB\n mf_get() allocation or a SEGV inside readfile().\n - debian/patches/CVE-2026-28421.patch: bound pe_page_count and\n pe_bnum against mf_blocknr_max and validate pe_old_lnum and\n pe_line_count before use, in src/memline.c; matches upstream patch\n 9.2.0077.\n - CVE-2026-28421\n * SECURITY UPDATE: command injection via newline in glob(): the newline\n character was missing from SHELL_SPECIAL, so it was not escaped before\n mch_expand_wildcards() handed the pattern to the shell and could act\n as a command separator.\n - debian/patches/CVE-2026-33412.patch: add '\\n' to SHELL_SPECIAL, in\n src/os_unix.c; matches upstream patch 9.2.0202.\n - CVE-2026-33412\n * SECURITY UPDATE: modeline security bypass: several options holding\n expressions could be set from a modeline, so opening a crafted file\n evaluated attacker-supplied expressions. In this version the\n expressions reachable this way are the 'statusline'-style %{} items of\n 'printheader' and 'guitabtooltip', which were evaluated in the sandbox\n only; the F{func} flag of 'complete' and the mapset() function named by\n the upstream advisory arrived in later releases and are not present in\n this version.\n - debian/patches/patch-8.1.1366-using-expressions-in-a-modeline-is-unsafe.patch:\n add the 'modelineexpr' option and the P_MLE flag,\n refuse P_MLE options in a modeline unless 'modelineexpr' is set,\n mark the expression-bearing options P_MLE, and document\n 'modelineexpr' and E992, in src/option.c, src/option.h and\n runtime/doc/options.txt; prerequisite for the fix below.\n - debian/patches/patch-8.1.1367-can-set-modelineexpr-in-modeline.patch:\n mark 'modelineexpr' itself P_SECURE so a modeline cannot enable it,\n and document that, in src/option.c and runtime/doc/options.txt;\n without this the check above can be turned off by the crafted file\n itself.\n - debian/patches/CVE-2026-34982.patch: mark 'complete',\n 'guitabtooltip' and 'printheader' P_MLE, in src/option.c; matches\n upstream patch 9.2.0276.\n - CVE-2026-34982\n * SECURITY UPDATE: path traversal in zip.vim: neither zip#Write() nor\n zip#Extract() rejected archive members whose path escaped the\n extraction directory, so a crafted zip could write outside it.\n - debian/patches/CVE-2026-35177.patch: reject any path that simplifies\n to one containing \"../\" in both zip#Write() and zip#Extract(), in\n runtime/autoload/zip.vim; matches upstream patch 9.2.0280.\n - CVE-2026-35177\n * SECURITY UPDATE: command injection in the netbeans interface via\n defineAnnoType: typeName, fg and bg arrived unvalidated from the\n NetBeans server and were interpolated into an Ex command, so a bar\n could append arbitrary commands; specialKeys likewise built a map\n command from an unvalidated key token.\n - debian/patches/CVE-2026-39881.patch: validate typeName, fg and bg\n against character allowlists and accept only alphanumerics and '-'\n in a specialKeys token, in src/netbeans.c; matches upstream patch\n 9.2.0316.\n - CVE-2026-39881\n * SECURITY UPDATE: command injection via backticks in tag files:\n expand_tag_fname() passed a tag filename containing backticks to\n wildcard expansion, which ran it through the shell.\n - debian/patches/CVE-2026-41411.patch: refuse to expand a tag filename\n containing a backtick, in src/tag.c; matches upstream patch\n 9.2.0357.\n - CVE-2026-41411\n * NOTE: behaviour change that comes with the 'modelineexpr' mechanism\n above: options that hold an expression ('balloonexpr', 'foldexpr',\n 'foldtext', 'formatexpr', 'guitablabel', 'iconstring', 'includeexpr',\n 'indentexpr', 'rulerformat', 'statusline', 'tabline', 'titlestring',\n 'complete', 'guitabtooltip' and 'printheader') can no longer be set\n from a modeline unless the new 'modelineexpr' option is on, and are\n refused with E992. 'cdpath' becomes modeline- and sandbox-refused\n (E520). This is the upstream 8.1.1366 behaviour; see\n :help modelineexpr.\n * debian/patches/fix-Test_terminal_cwd.patch: join the first two terminal\n lines before comparing in Test_terminal_cwd(), so the test still passes\n when the build path is long enough for the pwd output to wrap; matches\n upstream patch 9.0.0541.", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/ubuntu18.04els/advisories/2026/clsa-2026_1787304699.json" } ], "tracking": { "current_release_date": "2026-08-21T09:33:19Z", "generator": { "date": "2026-08-21T09:33:19Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1787304699", "initial_release_date": "2026-08-21T09:33:19Z", "revision_history": [ { "date": "2026-08-21T09:33:19Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 10 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu 18.04", "product": { "name": "Ubuntu 18.04", "product_id": "Ubuntu-18", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gtk@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-athena@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/xxd@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-tiny@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gtk3@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-nox@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gui-common@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-doc@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gnome@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-common@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-runtime@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-39881", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-39881" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19", "url": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0316", "url": "https://github.com/vim/vim/releases/tag/v9.2.0316" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6", "url": "https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6" } ], "release_date": "2026-04-08T21:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-41411", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., `command`), Vim executes the embedded command via the system shell with the full privileges of the running user.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-41411" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb", "url": "https://github.com/vim/vim/commit/c78194e41d5a0b05b0ddf383b6679b1503f977fb" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0357", "url": "https://github.com/vim/vim/releases/tag/v9.2.0357" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8", "url": "https://github.com/vim/vim/security/advisories/GHSA-cwgx-gcj7-6qh8" } ], "release_date": "2026-04-24T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-28417", "cwe": { "id": "CWE-86", "name": "Improper Neutralization of Invalid Characters in Identifiers in Web Pages" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-28417" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860", "url": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0073", "url": "https://github.com/vim/vim/releases/tag/v9.2.0073" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336", "url": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/02/27/6", "url": "http://www.openwall.com/lists/oss-security/2026/02/27/6" } ], "release_date": "2026-02-27T22:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-34982", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, the `mapset()` function lacks a `check_secure()` call, allowing it to be abused from sandboxed expressions. Commit 9.2.0276 fixes the issue.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34982" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615", "url": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0276", "url": "https://github.com/vim/vim/releases/tag/v9.2.0276" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9", "url": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/04/01/1", "url": "http://www.openwall.com/lists/oss-security/2026/04/01/1" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11389", "url": "https://access.redhat.com/errata/RHSA-2026:11389" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11509", "url": "https://access.redhat.com/errata/RHSA-2026:11509" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11510", "url": "https://access.redhat.com/errata/RHSA-2026:11510" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19073", "url": "https://access.redhat.com/errata/RHSA-2026:19073" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:19224", "url": "https://access.redhat.com/errata/RHSA-2026:19224" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:21275", "url": "https://access.redhat.com/errata/RHSA-2026:21275" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:22634", "url": "https://access.redhat.com/errata/RHSA-2026:22634" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28049", "url": "https://access.redhat.com/errata/RHSA-2026:28049" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28050", "url": "https://access.redhat.com/errata/RHSA-2026:28050" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:28133", "url": "https://access.redhat.com/errata/RHSA-2026:28133" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:30078", "url": "https://access.redhat.com/errata/RHSA-2026:30078" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:30087", "url": "https://access.redhat.com/errata/RHSA-2026:30087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:30088", "url": "https://access.redhat.com/errata/RHSA-2026:30088" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:30089", "url": "https://access.redhat.com/errata/RHSA-2026:30089" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:30900", "url": "https://access.redhat.com/errata/RHSA-2026:30900" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:33453", "url": "https://access.redhat.com/errata/RHSA-2026:33453" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34476", "url": "https://access.redhat.com/errata/RHSA-2026:34476" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:34477", "url": "https://access.redhat.com/errata/RHSA-2026:34477" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36004", "url": "https://access.redhat.com/errata/RHSA-2026:36004" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36005", "url": "https://access.redhat.com/errata/RHSA-2026:36005" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:36006", "url": "https://access.redhat.com/errata/RHSA-2026:36006" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-34982", "url": "https://access.redhat.com/security/cve/CVE-2026-34982" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2455400", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455400" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34982.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34982.json" } ], "release_date": "2026-04-06T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-33412", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-33412" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a", "url": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0202", "url": "https://github.com/vim/vim/releases/tag/v9.2.0202" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c", "url": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/03/19/10", "url": "http://www.openwall.com/lists/oss-security/2026/03/19/10" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10065", "url": "https://access.redhat.com/errata/RHSA-2026:10065" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10097", "url": "https://access.redhat.com/errata/RHSA-2026:10097" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:11768", "url": "https://access.redhat.com/errata/RHSA-2026:11768" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:12274", "url": "https://access.redhat.com/errata/RHSA-2026:12274" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:14773", "url": "https://access.redhat.com/errata/RHSA-2026:14773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:15087", "url": "https://access.redhat.com/errata/RHSA-2026:15087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16008", "url": "https://access.redhat.com/errata/RHSA-2026:16008" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16009", "url": "https://access.redhat.com/errata/RHSA-2026:16009" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16174", "url": "https://access.redhat.com/errata/RHSA-2026:16174" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17596", "url": "https://access.redhat.com/errata/RHSA-2026:17596" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:25096", "url": "https://access.redhat.com/errata/RHSA-2026:25096" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6502", "url": "https://access.redhat.com/errata/RHSA-2026:6502" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6539", "url": "https://access.redhat.com/errata/RHSA-2026:6539" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6540", "url": "https://access.redhat.com/errata/RHSA-2026:6540" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6617", "url": "https://access.redhat.com/errata/RHSA-2026:6617" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6619", "url": "https://access.redhat.com/errata/RHSA-2026:6619" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6620", "url": "https://access.redhat.com/errata/RHSA-2026:6620" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6725", "url": "https://access.redhat.com/errata/RHSA-2026:6725" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6729", "url": "https://access.redhat.com/errata/RHSA-2026:6729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6730", "url": "https://access.redhat.com/errata/RHSA-2026:6730" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6731", "url": "https://access.redhat.com/errata/RHSA-2026:6731" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6736", "url": "https://access.redhat.com/errata/RHSA-2026:6736" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6915", "url": "https://access.redhat.com/errata/RHSA-2026:6915" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7239", "url": "https://access.redhat.com/errata/RHSA-2026:7239" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7243", "url": "https://access.redhat.com/errata/RHSA-2026:7243" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7335", "url": "https://access.redhat.com/errata/RHSA-2026:7335" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7711", "url": "https://access.redhat.com/errata/RHSA-2026:7711" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8259", "url": "https://access.redhat.com/errata/RHSA-2026:8259" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8423", "url": "https://access.redhat.com/errata/RHSA-2026:8423" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:9832", "url": "https://access.redhat.com/errata/RHSA-2026:9832" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-33412", "url": "https://access.redhat.com/security/cve/CVE-2026-33412" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2450907", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450907" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33412.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33412.json" } ], "release_date": "2026-03-24T20:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-26269", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-26269" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/c5f312aad8e4179e437f81ad39a860cd0ef11970", "url": "https://github.com/vim/vim/commit/c5f312aad8e4179e437f81ad39a860cd0ef11970" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.1.2148", "url": "https://github.com/vim/vim/releases/tag/v9.1.2148" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-9w5c-hwr9-hc68", "url": "https://github.com/vim/vim/security/advisories/GHSA-9w5c-hwr9-hc68" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/02/13/2", "url": "http://www.openwall.com/lists/oss-security/2026/02/13/2" } ], "release_date": "2026-02-13T20:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-35177", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-35177" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24", "url": "https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24" } ], "release_date": "2026-04-06T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-22667", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-22667" }, { "category": "external", "summary": "https://gist.githubusercontent.com/henices/2467e7f22dcc2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt", "url": "https://gist.githubusercontent.com/henices/2467e7f22dcc2aa97a2453e197b55a0c/raw/7b54bccc9a129c604fb139266f4497ab7aaa94c7/gistfile1.txt" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47", "url": "https://github.com/vim/vim/commit/b39b240c386a5a29241415541f1c99e2e6b8ce47" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UI44Y4LJLG34D4HNB6NTPLUPZREHAEL7/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UI44Y4LJLG34D4HNB6NTPLUPZREHAEL7/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIQLVUSYHDN3644K6EFDI7PRZOTIKXM3/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UIQLVUSYHDN3644K6EFDI7PRZOTIKXM3/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240223-0008/", "url": "https://security.netapp.com/advisory/ntap-20240223-0008/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00023.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UI44Y4LJLG34D4HNB6NTPLUPZREHAEL7/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UI44Y4LJLG34D4HNB6NTPLUPZREHAEL7/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIQLVUSYHDN3644K6EFDI7PRZOTIKXM3/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIQLVUSYHDN3644K6EFDI7PRZOTIKXM3/" } ], "release_date": "2024-02-05T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-25749", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-25749" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9", "url": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.1.2132", "url": "https://github.com/vim/vim/releases/tag/v9.1.2132" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43", "url": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43" } ], "release_date": "2026-02-06T23:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-28421", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-28421" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/65c1a143c331c886dc28", "url": "https://github.com/vim/vim/commit/65c1a143c331c886dc28" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0077", "url": "https://github.com/vim/vim/releases/tag/v9.2.0077" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p", "url": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/02/27/10", "url": "http://www.openwall.com/lists/oss-security/2026/02/27/10" } ], "release_date": "2026-02-27T22:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-21T09:31:41.391868Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787304699" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }