SUSE-SU-2026:1051-1

CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602).
CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229).
CVE-2026-28417: Fixed that a crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051).
CVE-2026-28418: Fixed that a malformed tags file can cause an heap-based buffer overflow out-of-bounds read (bsc#1259052)
CVE-2026-28419: Fixed processing a malformed tags file containing a delimiter can lead to a crash (bsc#1259053)
CVE-2026-28420: Fixed that processing maximum combining characters in terminal emulator can lead to heap-based buffer overflow write (bsc#1259054)
CVE-2026-28421: Fixed that a crafted swap file can cause a heap-buffer-overflow and a segmentation fault
CVE-2026-28422: Fixed that a malicious modeline or plugin can trigger a stack-buffer-overflow (bsc#1259056)

References

Affected packages

SUSE:Linux Enterprise Server 12 SP5-LTSS / vim

Package

Name: vim
Purl: pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.2.0110-17.59.1

Ecosystem specific

{
    "binaries": [
        {
            "vim": "9.2.0110-17.59.1",
            "gvim": "9.2.0110-17.59.1",
            "vim-data-common": "9.2.0110-17.59.1",
            "vim-data": "9.2.0110-17.59.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1051-1.json"

SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / vim

Package

Name: vim
Purl: pkg:rpm/suse/vim&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

9.2.0110-17.59.1

Ecosystem specific

{
    "binaries": [
        {
            "vim": "9.2.0110-17.59.1",
            "gvim": "9.2.0110-17.59.1",
            "vim-data-common": "9.2.0110-17.59.1",
            "vim-data": "9.2.0110-17.59.1"
        }
    ]
}

Database specific

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:1051-1.json"