VYPR

rpm package

opensuse/vifm&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/vifm&distro=openSUSE%20Tumbleweed

Vulnerabilities (1)

  • CVE-2026-8997MedMay 22, 2026
    affected < 0.14.4-1.1fixed 0.14.4-1.1

    vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json). This flaw occurs because the application lacks a runtime check on the length of history entries in release builds, potentially allowing a crafted long path or