CLSA-2026-1787394930 Fix of 10 CVEs

SECURITY UPDATE: command injection in the tar plugin: tarVimuntar escaped the tarball name with shellescape without the special argument before running gunzip/gzip through :!, so characters that Vim expands in a :! command line such as % and survived in the name and let a crafted archive name run...

CLSA-2026-1783787785 vim: Fix of CVE-2026-57456

CVE-2026-57456: use repr to quote python omni-completion doc strings before exec in the Scope/Class/Function getcode of pythoncomplete/python3complete, preventing code execution via a crafted docstring upstream 9.2.0699...

CLSA-2026-1783788245 vim: Fix of CVE-2026-57456

CVE-2026-57456: use repr to quote python omni-completion doc strings before exec in the Scope/Class/Function getcode of pythoncomplete/python3complete, preventing code execution via a crafted docstring upstream 9.2.0699...

CLSA-2026-1782299648 vim: Fix of CVE-2026-52860

CVE-2026-52860: fix possible code execution in python3complete/pythoncomplete by stripping default expressions and annotations from function parameter lists and whitelisting class bases to dotted names before exec upstream patch 9.2.0597...

CLSA-2026-1783079038 vim: Fix of CVE-2026-57456

CVE-2026-57456: use repr to quote python omni-completion doc strings before exec in the Scope/Class/Function getcode of pythoncomplete/python3complete, preventing code execution via a crafted docstring upstream 9.2.0699...

CLSA-2026-1783075843 vim: Fix of CVE-2026-57456

CVE-2026-57456: use repr to quote python omni-completion doc strings before exec in the Scope/Class/Function getcode of pythoncomplete/python3complete, preventing code execution via a crafted docstring upstream 9.2.0699...

CLSA-2026-1782896270 Fix CVE(s): CVE-2026-55693, CVE-2026-57455, CVE-2026-57456

SECURITY UPDATE: Out-of-bounds write in treecountwords in src/spellfile.c when a crafted .spl/.sug spell-file pair loaded during spell suggestion drives the word-trie descent past the end of the MAXWLEN-sized arridx, curi and wordcount stack arrays - debian/patches/CVE-2026-55693.patch: bound the...

CLSA-2026-1782221997 vim: Fix of 4 CVEs

CVE-2026-52858: disable execution of import/from statements harvested from the buffer during python omni-completion pythoncomplete/python3complete, gated behind the opt-in g:pythoncompleteallowimport upstream 9.2.0561 and 9.2.0568 - CVE-2026-52860: strip parameter default values and annotations...

CLSA-2026-1782299449 vim: Fix of CVE-2026-52860

CVE-2026-52860: fix possible code execution in python3complete/pythoncomplete by stripping default expressions and annotations from function parameter lists and whitelisting class bases to dotted names before exec upstream patch 9.2.0597...

CLSA-2026-1782153265 vim: Fix of 2 CVEs

CVE-2026-52858: fix possible code execution in python3complete/pythoncomplete by not executing import/from statements harvested from the buffer unless g:pythoncompleteallowimport is set upstream patch 9.2.0561...

CLSA-2026-1782152616 vim: Fix of 2 CVEs

CVE-2026-52858: fix possible code execution in python3complete/pythoncomplete by not executing import/from statements harvested from the buffer unless g:pythoncompleteallowimport is set upstream patch 9.2.0561...