stable

vim-9.2.390-1.fc43

FEDORA-2026-755c51e6a0 created by zdohnal 5 months ago for Fedora 43

Security fix for CVE-2026-39881

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-755c51e6a0

This update has been submitted for testing by zdohnal.

5 months ago

This update's test gating status has been changed to 'waiting'.

5 months ago

This update's test gating status has been changed to 'failed'.

5 months ago

This update's test gating status has been changed to 'waiting'.

5 months ago

This update's test gating status has been changed to 'waiting'.

5 months ago

This update's test gating status has been changed to 'passed'.

5 months ago

This update has been pushed to testing.

5 months ago
User Icon nixuser commented & provided feedback 5 months ago
karma

Working for me.

User Icon besser82 commented & provided feedback 5 months ago
karma

Works great! LGTM! =)

This update can be pushed to stable now if the maintainer wishes

5 months ago
karma

This update has been submitted for stable by bodhi.

5 months ago
User Icon derekenz commented & provided feedback 5 months ago
karma

Works

This update has been pushed to stable.

5 months ago
karma
User Icon david-hansen commented & provided feedback 4 months ago

I don't know where the most appropriate location to put such an important upgrade notice is, but... Upstream vim-9.2-390 made a significant change to modeline behavior: a new option 'modelinestrict' was added that only allows options from a specific set to be recognized. The default for that new option is enabled. So, if you have a modeline containing something innocuous like 'ignorecase' it will be ignored! I'm not sure why on earth 'ignorecase' is not in the allowed list...

Please advise on where in the fedora update ecosystem that such a notice can be placed. People like myself who try to stay fairly up-to-date suddenly had to spend a couple of hours tracing down why various modeline options were no longer working. This is not ideal behavior, as my initial response to the problem was to downgrade and stop updating!

This morning I finally spent time analyzing what else changed (based the CVE bugfix) to the vim-9.2 package that would BREAK modeline.

Partial relevant diffs between vim-9.2.280-1 and vim-9.2.390-1: From vim92/runtime/doc/version9.txt: +- Only a few whitelisted options are allowed to be set by a modeline to + improve overall security, see for details: 'modelinestrict' +- Removed the Wayland focus steal feature 'wlsteal', since it causes too many + issues and can now be re-implemted using the |clipboard-providers| feature + if needed, see |wayland-primary-selection| for an example.

From vim92/runtime/doc/options.txt: @@ -6195,6 +6199,48 @@ NOTE: 'modeline' is set to the Vi default value when 'compatible' is set and to the Vim default value when 'compatible' is reset.

+                   *'modelinestrict'* *'mlst'* *'nomodelinestrict'* *'nomlst'*
+'modelinestrict' 'mlst'        boolean (default: on)
+                       global
+       When on, only a safe subset of options can be set from a |modeline|.
+       The following options are allowed:
+               'autoindent'
+               'cindent'
+               'commentstring'
+               'expandtab'
+               'filetype'
+               'foldcolumn'
+               'foldenable'
+               'foldmethod'
+               'modifiable'
+               'readonly'
+               'rightleft'
+               'shiftwidth'
+               'smartindent'
+               'softtabstop'
+               'spell'
+               'spelllang'
+               'tabstop'
+               'textwidth'
+               'varsofttabstop'
+               'vartabstop'
+
+       Any other option set from a modeline will be silently ignored.
+       This option cannot be set from a |modeline| or in the |sandbox|, for
+       security reasons.
+
+       The behaviour of 'modeline', 'modelinestrict' and 'modelineexpr' is
+       as follows:
+
+       'modeline'| 'modelinestrict'| 'modelineexpr' | Meaning
+       ----------+-----------------+-------------------+--------~
+          on     |    off          |   on           | All options can be set
+          on     |    on           |   any          | Only whitelisted
+                 |                 |                | options can be set
+          on     |    off          |   off          | All options except for
+                 |                 |                | expr options can be set
+          off    |    any          |   any          | No options can be set
+
                                *'modifiable'* *'ma'* *'nomodifiable'* *'noma'*
                                *E21*
 'modifiable' 'ma'      boolean (default on)

Please log in to add feedback.

Metadata
Type
security
Severity
medium
Karma
5
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
14 days
Dates
submitted
5 months ago
in testing
5 months ago
in stable
5 months ago
approved
5 months ago
BZ#2456722 CVE-2026-39881 vim: Vim: Arbitrary code execution via command injection in NetBeans interface
0
0
BZ#2456806 CVE-2026-39881 vim: Vim: Arbitrary code execution via command injection in NetBeans interface [fedora-all]
0
0

Automated Test Results