0 releases 90 tags

RSS feed

• imports/c10s/vim-9.1.083-22.el10 1788277db1

  Compare

  Fix CVE-2026-57456: possible code execution with python complete

  Ghost released this 2026-08-05 16:09:28 +00:00 | -5024 commits to c8 since this release

  Backport upstream commit cce141c42740f122dd8486ae04e21c2a81016ba8
  to fix a security vulnerability (CVE-2026-57456) where crafted
  docstrings could trigger arbitrary code execution during Python
  omni-completion. The fix replaces raw triple-quote concatenation
  with repr() in both python3complete.vim and pythoncomplete.vim,
  and adds a new test to verify the fix.

  CVE: CVE-2026-57456
  Upstream patches:

  • github.com/vim/vim@cce141c427.patch
    Resolves: RHEL-192111

  This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

  Assisted-by: Ymir

  Downloads

  • Source code (ZIP)
    1 download
  • Source code (TAR.GZ)
    1 download