Linux · Security advisory · May 19, 2026

ALSA-2026:19073: Security update for 7 packages

ALSA-2026:19073, released May 19, 2026, fixes 1 CVE across 7 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0046

39th percentile

Fixed package versions

Product	Release	Fixed in
vim-X11	almalinux 10	2:9.1.083-9.el10_2.2
vim-common	almalinux 10	2:9.1.083-9.el10_2.2
vim-data	almalinux 10	2:9.1.083-9.el10_2.2
vim-enhanced	almalinux 10	2:9.1.083-9.el10_2.2
vim-filesystem	almalinux 10	2:9.1.083-9.el10_2.2
vim-minimal	almalinux 10	2:9.1.083-9.el10_2.2
xxd	almalinux 10	2:9.1.083-9.el10_2.2

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2026-34982	Vim modeline bypass via various options affects Vim < 9.2.0276		8.2	0.0046	None reported

Also fixes CVE-2026-34982

ALAS2023-2026-1584
vim-common, vim-data, vim-debuginfo and 9 more on amzn 2023
vim 2:9.1.0967-1ubuntu6.2
vim on Ubuntu 25.10 (questing)
vim-athena 2:9.1.0967-1ubuntu6.2
vim-athena on Ubuntu 25.10 (questing)
vim-common 2:9.1.0967-1ubuntu6.2
vim-common on Ubuntu 25.10 (questing)
vim-gtk3 2:9.1.0967-1ubuntu6.2
vim-gtk3 on Ubuntu 25.10 (questing)
vim-gui-common 2:9.1.0967-1ubuntu6.2
vim-gui-common on Ubuntu 25.10 (questing)
vim-motif 2:9.1.0967-1ubuntu6.2
vim-motif on Ubuntu 25.10 (questing)
vim-nox 2:9.1.0967-1ubuntu6.2
vim-nox on Ubuntu 25.10 (questing)

Vendor advisory

https://osv.dev/vulnerability/ALSA-2026:19073

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo