References: https://www.openwall.com/lists/oss-security/2026/05/07/9 https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv
Source RPM: (none) => vim-9.2.437-1.mga10.src.rpm, vim-9.2.437-1.mga9.src.rpmWhiteboard: (none) => MGA9TOOFlags: (none) => affects_mga9+
CVE: (none) => CVE-2026-45130Status comment: (none) => Fixed upstram in 9.2.450Summary: vim new security issue => vim new security issue CVE-2026-45130Depends on: (none) => 35332
Je le vous redonne parce-que c'est vous qui met à jour vim en Cauldron.
Assignee: bugsquad => nicolas.salguero
References: https://www.openwall.com/lists/oss-security/2026/05/14/6 https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w https://www.openwall.com/lists/oss-security/2026/05/14/7 https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3
CVE: CVE-2026-45130 => CVE-2026-45130, CVE-2026-43961, CVE-2026-46483Status comment: Fixed upstram in 9.2.450 => Fixed upstram in 9.2.480Summary: vim new security issue CVE-2026-45130 => vim new security issues CVE-2026-45130, CVE-2026-43961, CVE-2026-46483
References: https://www.openwall.com/lists/oss-security/2026/05/17/3 https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c (no CVE yet) https://www.openwall.com/lists/oss-security/2026/05/17/4 https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9 (no CVE yet)
Status comment: Fixed upstram in 9.2.480 => Fixed upstram in 9.2.496
For Cauldron, I asked for a freeze move.
Source RPM: vim-9.2.437-1.mga10.src.rpm, vim-9.2.437-1.mga9.src.rpm => vim-9.2.437-1.mga9.src.rpmVersion: Cauldron => 9Whiteboard: MGA9TOO => (none)Flags: affects_mga9+ => (none)
Suggested advisory: ======================== The updated packages fix a security vulnerability: Heap Buffer Overflow in spell file loading affects Vim < 9.2.0450. (CVE-2026-45130) Vimscript Code Injection in netrw NetrwMarkFile() via crafted filename affects Vim < 9.2.0480. (CVE-2026-43961) Command Injection in tar.vim affects Vim < 9.2.0479. (CVE-2026-46483) Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name affects Vim < 9.2.0495. Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex affects Vim < 9.2.0496. References: https://www.openwall.com/lists/oss-security/2026/05/07/9 https://github.com/vim/vim/security/advisories/GHSA-q4jv-r9gj-6cwv https://www.openwall.com/lists/oss-security/2026/05/14/6 https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w https://www.openwall.com/lists/oss-security/2026/05/14/7 https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3 https://www.openwall.com/lists/oss-security/2026/05/17/3 https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c https://www.openwall.com/lists/oss-security/2026/05/17/4 https://github.com/vim/vim/security/advisories/GHSA-4473-94jm-w5x9 ======================== Updated packages in core/updates_testing: ======================== vim-X11-9.2.498-1.mga9 vim-common-9.2.498-1.mga9 vim-enhanced-9.2.498-1.mga9 vim-minimal-9.2.498-1.mga9 from SRPM: vim-9.2.498-1.mga9.src.rpm
Status comment: Fixed upstram in 9.2.496 => (none)Assignee: nicolas.salguero => qa-bugsStatus: NEW => ASSIGNED
Keywords: (none) => advisory
mga9-64, vim file, edited it saved it.
CC: (none) => brtians1