OESA-2026-2204

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2204

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-2204.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-2204

Upstream

CVE-2026-41411

Published

2026-05-09T12:30:38Z

Modified

2026-05-09T12:47:14.627307Z

Summary

vim security update

Details

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerability exists in Vim's tag file processing. When resolving a tag, the filename field from the tags file is passed through wildcard expansion to resolve environment variables and wildcards. If the filename field contains backtick syntax (e.g., command), Vim executes the embedded command via the system shell with the full privileges of the running user.(CVE-2026-41411)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:24.03-LTS-SP1 / vim

Package

Name: vim
Purl: pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.0.2092-32.oe2403sp1

Ecosystem specific

{
    "x86_64": [
        "vim-X11-9.0.2092-32.oe2403sp1.x86_64.rpm",
        "vim-common-9.0.2092-32.oe2403sp1.x86_64.rpm",
        "vim-debuginfo-9.0.2092-32.oe2403sp1.x86_64.rpm",
        "vim-debugsource-9.0.2092-32.oe2403sp1.x86_64.rpm",
        "vim-enhanced-9.0.2092-32.oe2403sp1.x86_64.rpm",
        "vim-minimal-9.0.2092-32.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-32.oe2403sp1.aarch64.rpm",
        "vim-common-9.0.2092-32.oe2403sp1.aarch64.rpm",
        "vim-debuginfo-9.0.2092-32.oe2403sp1.aarch64.rpm",
        "vim-debugsource-9.0.2092-32.oe2403sp1.aarch64.rpm",
        "vim-enhanced-9.0.2092-32.oe2403sp1.aarch64.rpm",
        "vim-minimal-9.0.2092-32.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "vim-9.0.2092-32.oe2403sp1.src.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0.2092-32.oe2403sp1.noarch.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2204.json"