Alerts This Week
Warning Icon 1 1,529
Alerts This Week
Warning Icon 1 1,529

Mageia 9 Vim Important OS Command Injection and Buffer Overflow 2026-0049

mageia
Calendar Grey March 6, 2026
Dist Mageia Esm H88
Updated Vim packages for Mageia mitigate critical security flaws, including command injection and buffer overflows.
MGASA-2026-0049 - Updated vim packages fix security vulnerabilities

Summary

Description: OS Command Injection in netrw affects Vim < 9.2.0073. (CVE-2026-28417) Heap-based Buffer Overflow in Emacs tags parsing affects Vim < 9.2.0074. (CVE-2026-28418) Heap-based Buffer Underflow in Emacs tags parsing affects Vim < 9.2.0075. (CVE-2026-28419) Heap-based Buffer Overflow and OOB Read in :terminal affects Vim < 9.2.0076. (CVE-2026-28420) Multiple Vulnerabilities in Swap File Recovery affect Vim < 9.2.0077. (CVE-2026-28421) Stack-buffer-overflow in build_stl_str_hl() affects Vim < 9.2.0078. (CVE-2026-28422)

References

- https://bugs.mageia.org/show_bug.cgi?id=35167

- https://www.openwall.com/lists/oss-security/2026/02/27/6

- https://www.openwall.com/lists/oss-security/2026/02/27/7

- https://www.openwall.com/lists/oss-security/2026/02/27/8

- https://www.openwall.com/lists/oss-security/2026/02/27/9

- https://www.openwall.com/lists/oss-security/2026/02/27/10

- https://www.openwall.com/lists/oss-security/2026/02/27/11

- https://www.cve.org/CVERecord?id=CVE-2026-28417

- https://www.cve.org/CVERecord?id=CVE-2026-28418

- https://www.cve.org/CVERecord?id=CVE-2026-28419

- https://www.cve.org/CVERecord?id=CVE-2026-28420

- https://www.cve.org/CVERecord?id=CVE-2026-28421

- https://www.cve.org/CVERecord?id=CVE-2026-28422

Topics%20covered

Topics Covered

security advisory buffer overflow important command injection Mageia os command injection

Resolution

SRPMS

- 9/core/vim-9.2.106-1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Mar 2026
URL: https://advisories.mageia.org/MGASA-2026-0049.html
Type: security
CVE: CVE-2026-28417, CVE-2026-28418, CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422

Topics%20covered

Topics Covered

security advisory buffer overflow important command injection Mageia os command injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here