Most recent entries from all

ALSA-2026:22711 — Moderate: vim security update

2026-10-02T13:04:13.983349+00:00

Affected: AlmaLinux:10: vim-X11, AlmaLinux:10: vim-common, AlmaLinux:10: vim-data, AlmaLinux:10: vim-enhanced, AlmaLinux:10: vim-filesystem, AlmaLinux:10: vim-minimal, AlmaLinux:10: xxd

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-05671

2026-10-02T13:04:13.983437+00:00

bdu:2026-05671

BELL-CVE-2026-35177

2026-10-02T13:04:13.983455+00:00

Affected: Alpaquita:23: vim, Alpaquita:25: vim, Alpaquita:stream: vim

certfr-2026-avi-0406 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu…

2026-10-02T13:04:13.983476+00:00

certfr-2026-avi-0406

EUVD-2026-280810

2026-10-02T13:04:13.983491+00:00

EUVD-2026-280810

fkie_cve-2026-35177

2026-10-02T13:04:13.983502+00:00

Vim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.

msrc_CVE-2026-35177 — Path traversal issue with zip.vim in Vim

2026-10-02T13:04:13.983535+00:00

msrc_CVE-2026-35177

OESA-2026-2177 — vim security update

2026-10-02T13:04:13.983551+00:00

Affected: openEuler:24.03-LTS-SP1: vim, openEuler:24.03-LTS-SP3: vim, openEuler:20.03-LTS-SP4: vim, openEuler:22.03-LTS-SP4: vim, openEuler:24.03-LTS: vim

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Security Fix(es):

RHSA-2026:22711 — Red Hat Security Advisory: vim security update

2026-10-02T13:04:13.983583+00:00

vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

RHSA-2026:26319 — Red Hat Security Advisory: Red Hat Update Infrastructure 5.2 security update

2026-10-02T13:04:13.983601+00:00

gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison glibc: glibc: Denial of Service via iconv() function with specific character sets glibc: glibc: Incorrect DNS response parsing via crafted DNS server response glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions gnutls: gnutls: Information disclosure via heap overread in RSA key exchange gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass gnutls: gnutls: Denial of Service via DTLS packet reordering vu…

RLSA-2026:22711 — Moderate: vim security update

2026-10-02T13:04:13.983674+00:00

Affected: Rocky Linux:10: vim

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-35177

2026-10-02T13:04:13.983696+00:00

Affected: Ubuntu:Pro:14.04:LTS: vim, Ubuntu:Pro:16.04:LTS: vim, Ubuntu:Pro:18.04:LTS: vim, Ubuntu:Pro:20.04:LTS: vim, Ubuntu:22.04:LTS: vim, Ubuntu:24.04:LTS: vim, Ubuntu:25.10: vim, Ubuntu:26.04:LTS: vim

WID-SEC-W-2026-1777 — vim: Schwachstelle ermöglicht Manipulation von Dateien

2026-10-02T13:04:13.983726+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in vim ausnutzen, um Dateien zu manipulieren.