Commit Graph

1 Commits

Author SHA1 Message Date
RHEL Packaging Agent
1788277db1 Fix CVE-2026-57456: possible code execution with python complete
Backport upstream commit cce141c42740f122dd8486ae04e21c2a81016ba8
to fix a security vulnerability (CVE-2026-57456) where crafted
docstrings could trigger arbitrary code execution during Python
omni-completion. The fix replaces raw triple-quote concatenation
with repr() in both python3complete.vim and pythoncomplete.vim,
and adds a new test to verify the fix.

CVE: CVE-2026-57456
Upstream patches:
 - cce141c427.patch
Resolves: RHEL-192111

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-05 18:09:28 +02:00