Linux · Security advisory · April 13, 2026

ALSA-2026:7711: Security update for 2 packages

ALSA-2026:7711, released April 13, 2026, fixes 3 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0135

71st percentile

Priority of the 3 CVEs

Patch now 0
                                Urgent 0
                                High 3
                                Routine 0

Fixed package versions

Product	Release	Fixed in
vim-data	almalinux 10	2:9.1.083-6.el10_1.3
vim-filesystem	almalinux 10	2:9.1.083-6.el10_1.3

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-28417	vim: Vim is an open source, command line text editor	7.8	0.0135	None reported
High	CVE-2026-33412	Vim affected by Command injection via newline in glob()	7.3	0.0087	None reported
High	CVE-2026-28421	vim-common: Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Arbitrary code...	7.8	0.0021	None reported

Also fixes CVE-2026-28417

ALAS2023-2026-1584
vim-common, vim-data, vim-debuginfo and 9 more on amzn 2023
SUSE-SU-2026:0910-1
vim on opensuse-leap 15.6, sles 15.6, sles 15.7
vim 2:8.0.1453-1ubuntu1.13+esm14
vim on Ubuntu 18.04.6 LTS (bionic)
vim 2:8.1.2269-1ubuntu5.32+esm2
vim on Ubuntu 20.04 LTS (focal)
vim 2:8.2.3995-1ubuntu2.26
vim on Ubuntu 22.04.1 LTS (jammy)
vim 2:9.1.0016-1ubuntu7.10
vim on Ubuntu 24.04.5 LTS (noble)
vim 2:9.1.0967-1ubuntu6.1
vim on Ubuntu 25.10 (questing)
vim-athena 2:8.0.1453-1ubuntu1.13+esm14
vim-athena on Ubuntu 18.04.6 LTS (bionic)

Vendor advisory

https://osv.dev/vulnerability/ALSA-2026:7711

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo