SUSE-SU-2026:22797-1

Source
https://www.suse.com/support/update/announcement/2026/suse-su-202622797-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22797-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2026:22797-1
Upstream
CVE (3)
Related
Published
2026-07-17T12:25:54Z
Modified
2026-07-28T20:42:24Z
Summary
Security update for vim
Details

This update for vim fixes the following issues

  • Updated to version 9.2.0780
  • CVE-2026-59856: Arbitrary Code Execution via PHP Omni-Completion (bsc#1271194).
  • CVE-2026-59857: Out-of-bounds Write in SAL Soundfolding (bsc#1271195).
  • CVE-2026-59858: Arbitrary Code Execution via C Omni-Completion (bsc#1271193).
References

Affected packages

SUSE:Linux Micro 6.0 / vim

Package

Name
vim
Purl
pkg:rpm/suse/vim&distro=SUSE%20Linux%20Micro%206.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.2.0780-1.1

Ecosystem specific

{
    "binaries":  [
        {
            "vim-data-common":  "9.2.0780-1.1",
            "vim-small":  "9.2.0780-1.1"
        }
    ]
}

Database specific

source
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:22797-1.json"