CLSA-2026-1777306218

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json

JSON Data

https://api.test.osv.dev/v1/vulns/CLSA-2026-1777306218

Upstream

CVE-2026-33412

Published

2026-04-27T16:10:23Z

Modified

2026-06-04T09:45:49Z

Summary

Fix CVE(s): CVE-2026-33412

Details

SECURITY UPDATE: Command injection via newline in glob()
- debian/patches/CVE-2026-33412.patch: add '\n' to SHELL_SPECIAL in src/os_unix.c so newlines in glob() patterns are shell-escaped before mch_expand_wildcards() hands the string to the user's shell
- CVE-2026-33412

References

https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1777306218.html

Affected packages

TuxCare:Ubuntu:16.04

vim

Package

Name: vim
Purl: pkg:deb/tuxcare/vim?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-athena

Package

Name: vim-athena
Purl: pkg:deb/tuxcare/vim-athena?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-athena-py2

Package

Name: vim-athena-py2
Purl: pkg:deb/tuxcare/vim-athena-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-common

Package

Name: vim-common
Purl: pkg:deb/tuxcare/vim-common?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-doc

Package

Name: vim-doc
Purl: pkg:deb/tuxcare/vim-doc?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-gnome

Package

Name: vim-gnome
Purl: pkg:deb/tuxcare/vim-gnome?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-gnome-py2

Package

Name: vim-gnome-py2
Purl: pkg:deb/tuxcare/vim-gnome-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-gtk

Package

Name: vim-gtk
Purl: pkg:deb/tuxcare/vim-gtk?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-gtk-py2

Package

Name: vim-gtk-py2
Purl: pkg:deb/tuxcare/vim-gtk-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-gtk3

Package

Name: vim-gtk3
Purl: pkg:deb/tuxcare/vim-gtk3?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-gtk3-py2

Package

Name: vim-gtk3-py2
Purl: pkg:deb/tuxcare/vim-gtk3-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-gui-common

Package

Name: vim-gui-common
Purl: pkg:deb/tuxcare/vim-gui-common?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-nox

Package

Name: vim-nox
Purl: pkg:deb/tuxcare/vim-nox?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-nox-py2

Package

Name: vim-nox-py2
Purl: pkg:deb/tuxcare/vim-nox-py2?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-runtime

Package

Name: vim-runtime
Purl: pkg:deb/tuxcare/vim-runtime?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"

vim-tiny

Package

Name: vim-tiny
Purl: pkg:deb/tuxcare/vim-tiny?distro=ubuntu-16.04

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3:7.4.1689-3ubuntu1.5+tuxcare.els62

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777306218.json"