RLSA-2026:98119 Important: vim security, bug fix, and enhancement update

Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile filter expression allows arbitrary code execution CVE-2026-43961 Bug Fixes and Enhancements: vim writes file in place even though creating ...

vim security, bug fix, and enhancement update

An update is available for vim. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

Important: Red Hat Security Advisory: vim security, bug fix, and enhancement update

An update for vim is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

Important: Red Hat Security Advisory: vim security, bug fix, and enhancement update

An update for vim is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

Important: Red Hat Security Advisory: vim security, bug fix, and enhancement update

An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

RHEL 8 : vim (RHSA-2026:98119)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:98119 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vimscript injection via unescaped filename in netrw...

vim security, bug fix, and enhancement update

8.0.1763-34.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-34 - RHEL-285535 CVE-2026-43961 vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile filter expression allows arbitrary...

vim: Vimscript injection via unescaped filename in netrw s:NetrwMarkFile() filter() expression allows arbitrary code execution

A flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user...

CLSA-2026-1781258957 Fix CVE(s): CVE-2026-43961

SECURITY UPDATE: code injection in the netrw plugin via the mf mark file command: s:NetrwMarkFile embedded the marked filename into a filter expression by string concatenation, so a crafted filename containing vimscript e.g. nested execute was evaluated when the user marked it in a netrw listing....