Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allowed arbitrary OS command execution when a user opened a specially crafted file. The complete, guitabtooltip, and printheader options lack the PMLE flag, enabling modeline execution...