SUSE-ESSA-2026:0190

Details

Description of the patch:

Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): (Improved fix) vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177)

Affected Packages

vim-X11

SUSE Liberty Linux 7 LTSS

Fixed in:

2:7.4.629-8.el7_9.2.1

vim-common

SUSE Liberty Linux 7 LTSS

Fixed in:

2:7.4.629-8.el7_9.2.1

vim-enhanced

SUSE Liberty Linux 7 LTSS

Fixed in:

2:7.4.629-8.el7_9.2.1

vim-filesystem

SUSE Liberty Linux 7 LTSS

Fixed in:

2:7.4.629-8.el7_9.2.1

vim-minimal

SUSE Liberty Linux 7 LTSS

Fixed in:

2:7.4.629-8.el7_9.2.1

References

ADVISORY

https://www.suse.com/security/cve/CVE-2026-35177/

WEB

https://www.suse.com/support/security/rating/