Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Mageia 9 MGASA-2026-0083 Vim Important Path Traversal Issues

mageia
Calendar Grey April 6, 2026
Scroller Mageia
Updated vim packages in Mageia fix important security issues, including modeline bypass and path traversal vulnerabilities.
MGASA-2026-0083 - Updated vim packages fix security vulnerabilities

Summary

Description: Vim modeline bypass via various options affects Vim < 9.2.0276. (CVE-2026-34982) Path traversal issue with zip.vim in Vim < v9.2.0280. (CVE-2026-35177)

References

- https://bugs.mageia.org/show_bug.cgi?id=35308

- https://www.openwall.com/lists/oss-security/2026/03/31/14

- https://www.openwall.com/lists/oss-security/2026/04/01/1

- https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9

- https://www.openwall.com/lists/oss-security/2026/04/01/4

- https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24

- https://www.cve.org/CVERecord?id=CVE-2026-34982

- https://www.cve.org/CVERecord?id=CVE-2026-35177

Topics%20covered

Topics Covered

security advisory important vim path traversal Mageia modeline bypass

Resolution

SRPMS

- 9/core/vim-9.2.280-1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 06 Apr 2026
URL: https://advisories.mageia.org/MGASA-2026-0083.html
Type: security
CVE: CVE-2026-34982, CVE-2026-35177

Topics%20covered

Topics Covered

security advisory important vim path traversal Mageia modeline bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.