MGASA-2026-0555
- Source
- https://advisories.mageia.org/MGASA-2026-0555.html
- Import Source
- https://advisories.mageia.org/MGASA-2026-0555.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2026-0555
- Published
- 2026-10-27T04:31:25Z
- Modified
- 2026-10-27T04:45:03Z
- Summary
- Updated vim package fixes security vulnerabilities
- Details
-
Ex Command Injection via Unescaped Buffer Name in sign_jump() in Vim < v9.2.1090 Arbitrary Code Execution via Ruby Omni-Completion in Vim < 9.2.1177 Command Execution via Rmd Syntax Highlighting in Vim < 9.2.1178 Ex Command Execution via Cargo Quickfix Hooks in Vim < 9.2.1201
- References
-
- https://advisories.mageia.org/MGASA-2026-0555.html
- https://bugs.mageia.org/show_bug.cgi?id=36303
- https://www.openwall.com/lists/oss-security/2026/09/12/2
- https://github.com/vim/vim/security/advisories/GHSA-x9jf-rjm6-vxqh
- https://www.openwall.com/lists/oss-security/2026/10/12/6
- https://github.com/vim/vim/security/advisories/GHSA-4xgr-vqh2-xfx8
- https://www.openwall.com/lists/oss-security/2026/10/12/7
- https://github.com/vim/vim/security/advisories/GHSA-x2w5-pj55-7hpc
- https://www.openwall.com/lists/oss-security/2026/10/15/6
- https://github.com/vim/vim/security/advisories/GHSA-4vf6-278g-hq7j
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:10 / vim
Package
- Name
- vim
- Purl
- pkg:rpm/mageia/vim?arch=source&distro=mageia-10