ESSA-2026:0190: Moderate: SUSE Liberty Linux 7 LTSS Important: vim security update

[Update Advisories for SUSE Liberty Linux]

# Important: vim security update

Announcement ID: ESSA-2026:0190
Rating: Moderate

Cross-References:

  * CVE-2026-35177



CVSS scores:

  * CVE-2026-35177 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L
  * CVE-2026-35177 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:L/SA:L

Affected Products:

  * SUSE Liberty Linux 7 LTSS


An update that solves one vulnerability can now be installed.

## Description:

Vim (Vi IMproved) is an updated and improved version of the vi editor.
  Security Fix(es): 
 (Improved fix) vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass (CVE-2026-35177) 
  

## Package List:

  * SUSE Liberty Linux 7 LTSS:
    * vim-X11 2:7.4.629-8.el7_9.2.1
    * vim-common 2:7.4.629-8.el7_9.2.1
    * vim-enhanced 2:7.4.629-8.el7_9.2.1
    * vim-filesystem 2:7.4.629-8.el7_9.2.1
    * vim-minimal 2:7.4.629-8.el7_9.2.1

## References:

  * https://www.suse.com/security/cve/CVE-2026-35177.html