RHSA-2026:28050

Details:

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: arbitrary command execution via modeline sandbox bypass (CVE-2026-34982)

• vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177)

• vim: Vim: Command injection allows arbitrary code execution via malicious tag files (CVE-2026-41411)

• vim: command injection when decompressing .tgz archives (CVE-2026-46483)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.