Mageia alert MGASA-2026-0355 (vim)
| From: | Mageia Updates <updates-announce@ml.mageia.org> | |
| To: | updates-announce@ml.mageia.org | |
| Subject: | [updates-announce] MGASA-2026-0355: Updated vim packages fix security vulnerabilities | |
| Date: | Tue, 01 Sep 2026 05:07:41 +0200 | |
| Message-ID: | <20260901030741.3CEF39FECF@duvel.mageia.org> | |
| Archive-link: | Article |
MGASA-2026-0355 - Updated vim packages fix security vulnerabilities Publication date: 01 Sep 2026 URL: https://advisories.mageia.org/MGASA-2026-0355.html Type: security Affected Mageia releases: 10, 9 CVE: CVE-2026-73077, CVE-2026-73078, CVE-2026-73074, CVE-2026-73070, CVE-2026-73075, CVE-2026-73071, CVE-2026-73073, CVE-2026-73072, CVE-2026-73076 Description: Arbitrary Code Execution via Shell Keyword Lookup in Vim < 9.2.0839. (CVE-2026-73077) Arbitrary Code Execution via Netrw Menu Construction in Vim < 9.2.0840. (CVE-2026-73078) Heap Buffer Overflow in Text Property Handling in Vim < 9.2.0841. (CVE-2026-73074) Stack Buffer Overflow in the Vim Socket Server in Vim < 9.2.0842. (CVE-2026-73070) Out-of-bounds Access in Popup Opacity Handling in Vim >= 9.2.0469 && Vim < 9.2.0843. (CVE-2026-73075) Use-after-free in JSON Decoding in Vim >= 9.2.0511 && Vim < 9.2.0844. (CVE-2026-73071) Arbitrary Ex Command Execution in C Omni-Completion in Vim < 9.2.0845. (CVE-2026-73073) Heap Buffer Overflow when Loading a Spell File in Vim < 9.2.0846. (CVE-2026-73072) Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`. (CVE-2026-73076) References: - https://bugs.mageia.org/show_bug.cgi?id=36127 - https://www.openwall.com/lists/oss-security/2026/07/24/17 - https://www.openwall.com/lists/oss-security/2026/07/24/18 - https://www.openwall.com/lists/oss-security/2026/07/24/19 - https://www.openwall.com/lists/oss-security/2026/07/24/20 - https://www.openwall.com/lists/oss-security/2026/07/24/21 - https://www.openwall.com/lists/oss-security/2026/07/24/28 - https://www.openwall.com/lists/oss-security/2026/07/24/29 - https://www.openwall.com/lists/oss-security/2026/07/24/30 - https://www.openwall.com/lists/oss-security/2026/07/24/31 - https://github.com/vim/vim/security/advisories/GHSA-r5v6-... - https://github.com/vim/vim/security/advisories/GHSA-rcr7-... - https://github.com/vim/vim/security/advisories/GHSA-hm4g-... - https://github.com/vim/vim/security/advisories/GHSA-49m8-... - https://github.com/vim/vim/security/advisories/GHSA-pmvp-... - https://github.com/vim/vim/security/advisories/GHSA-69ch-... - https://github.com/vim/vim/security/advisories/GHSA-cx73-... - https://github.com/vim/vim/security/advisories/GHSA-9jqx-... - https://github.com/vim/vim/security/advisories/GHSA-r22p-... - https://www.openwall.com/lists/oss-security/2026/08/25/8 - https://github.com/vim/vim/security/advisories/GHSA-r77m-... - https://www.cve.org/CVERecord?id=CVE-2026-73077 - https://www.cve.org/CVERecord?id=CVE-2026-73078 - https://www.cve.org/CVERecord?id=CVE-2026-73074 - https://www.cve.org/CVERecord?id=CVE-2026-73070 - https://www.cve.org/CVERecord?id=CVE-2026-73075 - https://www.cve.org/CVERecord?id=CVE-2026-73071 - https://www.cve.org/CVERecord?id=CVE-2026-73073 - https://www.cve.org/CVERecord?id=CVE-2026-73072 - https://www.cve.org/CVERecord?id=CVE-2026-73076 SRPMS: - 10/core/vim-9.2.1011-2.mga10 - 9/core/vim-9.2.1011-2.mga9