File _patchinfo of Package patchinfo.43071
<patchinfo incident="43071"> <!--generated with prepare-update from request 403451--> <issue tracker="bnc" id="1246602">VUL-0: CVE-2025-53906: vim: malicious zip archive may cause a path traversal in Vim’s zip</issue> <issue tracker="bnc" id="1258229">VUL-0: CVE-2026-26269: vim: Netbeans specialKeys stack buffer overflow</issue> <issue tracker="bnc" id="1259051">VUL-0: CVE-2026-28417: vim: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands</issue> <issue tracker="cve" id="2025-53906"/> <issue tracker="cve" id="2026-26269"/> <issue tracker="cve" id="2026-28417"/> <category>security</category> <rating>moderate</rating> <packager>mschreiner</packager> <summary>Security update for vim</summary> <description>This update for vim fixes the following issues: Update Vim to version 9.2.0110: - CVE-2025-53906: malicious zip archive may cause a path traversal in Vim's zip (bsc#1246602). - CVE-2026-26269: Netbeans specialKeys stack buffer overflow (bsc#1258229). - CVE-2026-28417: crafted URL parsed by netrw plugin can lead to execute arbitrary shell commands (bsc#1259051). </description> </patchinfo>