CLSA-2026-1781086654

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1781086654

Upstream

CVE-2026-41411

Published

2026-06-10T10:19:09Z

Modified

2026-10-26T09:32:00Z

Summary

Fix CVE(s): CVE-2026-41411

Details

SECURITY UPDATE: command injection via backticks in tag files
- debian/patches/CVE-2026-41411.patch: disallow backticks in tag filenames before attempting wildcard expansion in expand_tag_fname() (src/tag.c), preventing arbitrary shell command execution via a malicious tags file; matches upstream patch 9.2.0357
- CVE-2026-41411

References

Affected packages

TuxCare:Ubuntu:16.04

vim

Package

Name: vim
Purl: pkg:deb/tuxcare/vim?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-athena

Package

Name: vim-athena
Purl: pkg:deb/tuxcare/vim-athena?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-athena-py2

Package

Name: vim-athena-py2
Purl: pkg:deb/tuxcare/vim-athena-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-common

Package

Name: vim-common
Purl: pkg:deb/tuxcare/vim-common?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-doc

Package

Name: vim-doc
Purl: pkg:deb/tuxcare/vim-doc?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-gnome

Package

Name: vim-gnome
Purl: pkg:deb/tuxcare/vim-gnome?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-gnome-py2

Package

Name: vim-gnome-py2
Purl: pkg:deb/tuxcare/vim-gnome-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-gtk

Package

Name: vim-gtk
Purl: pkg:deb/tuxcare/vim-gtk?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-gtk-py2

Package

Name: vim-gtk-py2
Purl: pkg:deb/tuxcare/vim-gtk-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-gtk3

Package

Name: vim-gtk3
Purl: pkg:deb/tuxcare/vim-gtk3?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-gtk3-py2

Package

Name: vim-gtk3-py2
Purl: pkg:deb/tuxcare/vim-gtk3-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-gui-common

Package

Name: vim-gui-common
Purl: pkg:deb/tuxcare/vim-gui-common?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-nox

Package

Name: vim-nox
Purl: pkg:deb/tuxcare/vim-nox?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-nox-py2

Package

Name: vim-nox-py2
Purl: pkg:deb/tuxcare/vim-nox-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-runtime

Package

Name: vim-runtime
Purl: pkg:deb/tuxcare/vim-runtime?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"

vim-tiny

Package

Name: vim-tiny
Purl: pkg:deb/tuxcare/vim-tiny?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els66

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1781086654.json"