Advisories » MGASA-2026-0355

Updated vim packages fix security vulnerabilities

Publication date: 01 Sep 2026
Modification date: 01 Sep 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-73077 , CVE-2026-73078 , CVE-2026-73074 , CVE-2026-73070 , CVE-2026-73075 , CVE-2026-73071 , CVE-2026-73073 , CVE-2026-73072 , CVE-2026-73076

Description

Arbitrary Code Execution via Shell Keyword Lookup in Vim < 9.2.0839.
(CVE-2026-73077)
Arbitrary Code Execution via Netrw Menu Construction in Vim < 9.2.0840.
(CVE-2026-73078)
Heap Buffer Overflow in Text Property Handling in Vim < 9.2.0841.
(CVE-2026-73074)
Stack Buffer Overflow in the Vim Socket Server in Vim < 9.2.0842.
(CVE-2026-73070)
Out-of-bounds Access in Popup Opacity Handling in Vim >= 9.2.0469 && Vim
< 9.2.0843. (CVE-2026-73075)
Use-after-free in JSON Decoding in Vim >= 9.2.0511 && Vim < 9.2.0844.
(CVE-2026-73071)
Arbitrary Ex Command Execution in C Omni-Completion in Vim < 9.2.0845.
(CVE-2026-73073)
Heap Buffer Overflow when Loading a Spell File in Vim < 9.2.0846.
(CVE-2026-73072)
Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay
in `vimball.vim`. (CVE-2026-73076)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36127
• https://www.openwall.com/lists/oss-security/2026/07/24/17
• https://www.openwall.com/lists/oss-security/2026/07/24/18
• https://www.openwall.com/lists/oss-security/2026/07/24/19
• https://www.openwall.com/lists/oss-security/2026/07/24/20
• https://www.openwall.com/lists/oss-security/2026/07/24/21
• https://www.openwall.com/lists/oss-security/2026/07/24/28
• https://www.openwall.com/lists/oss-security/2026/07/24/29
• https://www.openwall.com/lists/oss-security/2026/07/24/30
• https://www.openwall.com/lists/oss-security/2026/07/24/31
• https://github.com/vim/vim/security/advisories/GHSA-r5v6-q6j8-8qw2
• https://github.com/vim/vim/security/advisories/GHSA-rcr7-f3wr-22r2
• https://github.com/vim/vim/security/advisories/GHSA-hm4g-pjfx-m27j
• https://github.com/vim/vim/security/advisories/GHSA-49m8-wwxj-mr69
• https://github.com/vim/vim/security/advisories/GHSA-pmvp-6rcj-98p4
• https://github.com/vim/vim/security/advisories/GHSA-69ch-22ch-r887
• https://github.com/vim/vim/security/advisories/GHSA-cx73-phcg-3j5g
• https://github.com/vim/vim/security/advisories/GHSA-9jqx-hgpr-6v64
• https://github.com/vim/vim/security/advisories/GHSA-r22p-fhw4-84p2
• https://www.openwall.com/lists/oss-security/2026/08/25/8
• https://github.com/vim/vim/security/advisories/GHSA-r77m-8m55-rpr6
• https://www.cve.org/CVERecord?id=CVE-2026-73077
• https://www.cve.org/CVERecord?id=CVE-2026-73078
• https://www.cve.org/CVERecord?id=CVE-2026-73074
• https://www.cve.org/CVERecord?id=CVE-2026-73070
• https://www.cve.org/CVERecord?id=CVE-2026-73075
• https://www.cve.org/CVERecord?id=CVE-2026-73071
• https://www.cve.org/CVERecord?id=CVE-2026-73073
• https://www.cve.org/CVERecord?id=CVE-2026-73072
• https://www.cve.org/CVERecord?id=CVE-2026-73076

SRPMS

10/core

• vim-9.2.1011-2.mga10

9/core

• vim-9.2.1011-2.mga9