issue处理注意事项:
1. 提交正常修复分支的修复PR时,必须关联当前issue,否则无法关闭当前issue;
2. 模板内容需要填写完整, 无论是受影响或者不受影响都需要填写完整内容;
3. 以下为模板中需要填写完整的内容, 请复制到评论区回复;
注: 内容的关键词(影响性分析说明, openEuler评分, 受影响版本排查(受影响/不受影响), 修复是否涉及abi变化(是/否), 原因说明)不能省略,省略后cve-manager将无法正常解析填写内容.

影响性分析说明:

openEuler评分: (评分和向量)

受影响版本排查(受影响/不受影响):
1.master(9.2.0782):
2.openEuler-20.03-LTS-SP4(9.0):
3.openEuler-22.03-LTS-SP4(9.0):
4.openEuler-24.03-LTS-Next(9.0.2092):
5.openEuler-24.03-LTS-SP1(9.0.2092):
6.openEuler-24.03-LTS-SP3(9.0.2092):
7.openEuler-24.03-LTS-SP4(9.0.2092):

修复是否涉及abi变化(是/否)：
1.master(9.2.0782):
2.openEuler-20.03-LTS-SP4(9.0):
3.openEuler-22.03-LTS-SP4(9.0):
4.openEuler-24.03-LTS-Next(9.0.2092):
5.openEuler-24.03-LTS-SP1(9.0.2092):
6.openEuler-24.03-LTS-SP3(9.0.2092):
7.openEuler-24.03-LTS-SP4(9.0.2092):

原因说明：
1.master(9.2.0782):
2.openEuler-20.03-LTS-SP4(9.0):
3.openEuler-22.03-LTS-SP4(9.0):
4.openEuler-24.03-LTS-Next(9.0.2092):
5.openEuler-24.03-LTS-SP1(9.0.2092):
6.openEuler-24.03-LTS-SP3(9.0.2092):
7.openEuler-24.03-LTS-SP4(9.0.2092):

原因说明填写请参考下方表格(注意：版本是否受影响和版本的原因说明必须对应，例如master版本分支受影响，那原因说明只能是受影响对应的原因之一!)：

issue处理具体操作请参考:
https://atomgit.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
pr关联issue具体操作请参考:
https://docs.atomgit.com/docs/help/home/org_project/pullrequests/pr-related-issue

说明：补丁链接仅供初步排查参考，实际可用性请人工再次确认，补丁下载验证可使用CVE补丁工具。
若补丁不准确，烦请在此issue下评论 '/report-patch 参考网址 补丁链接1,补丁链接2' 反馈正确信息，便于我们不断优化工具，不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

Welcome To openEuler Community

Hey @openLiBingCI , thanks for your contribution to the community.

Bot Usage Manual

I'm the Bot here serving you. You can find the instructions on how to interact with me at Here . That means you can comment below every pull request or issue to trigger Bot Commands.

Contact Guide

If you have any questions, please contact the SIG: Base-service ,
and any of the maintainers: @dillon_chen, @licihua, @overweight, @shenyangyang, @xujing99, @zhujianwei001 ,
and any of the committers: @hubin1305, @jiayi0118, @luckky7, @lvying6, @znzju .

/branches openEuler-24.03-LTS-SP4 /patch_url https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69.patch

正在自动化处理任务，任务编号:TASK-gitcode__vim-334-20260813114909，指定分支:openEuler-24.03-LTS-SP4，使用指定补丁(1个)

✅ 任务结束 (用时: 142分钟)

是否需要修复：未知
是否存在适配：否
上游社区补丁：无

分支修复情况：
1.openEuler-24.03-LTS-SP4(9.0.2092): 分析失败

/branches openEuler-20.03-LTS-SP4 openEuler-22.03-LTS-SP4 openEuler-24.03-LTS openEuler-24.03-LTS-SP4 /patch_url https://github.com/vim/vim/commit/29c6fd090d4520592f8be7d9ec81190edf25ef69.patch

正在自动化处理任务，任务编号:TASK-gitcode__vim-334-20260818142936-0，指定分支:openEuler-20.03-LTS-SP4，使用指定补丁(1个)

✅ 任务结束 (用时: 36分钟)

正在自动化处理任务，任务编号:TASK-gitcode__vim-334-20260818142936-1，指定分支:openEuler-22.03-LTS-SP4，使用指定补丁(1个)

✅ 任务结束 (用时: 58分钟)

正在自动化处理任务，任务编号:TASK-gitcode__vim-334-20260818142937-2，指定分支:openEuler-24.03-LTS，使用指定补丁(1个)

✅ 任务结束 (用时: 31分钟)

正在自动化处理任务，任务编号:TASK-gitcode__vim-334-20260818142938-3，指定分支:openEuler-24.03-LTS-SP4，使用指定补丁(1个)

✅ 任务结束 (用时: 22分钟)

CVE-2026-73078

是否需要修复：是
是否存在适配：是
上游社区补丁：无

分支修复情况：
1.openEuler-24.03-LTS-SP4(9.0.2092): 已修复

PR：

• openEuler-24.03-LTS-SP4: https://gitcode.com/src-openeuler/vim/merge_requests/973

补丁适配报告 (CVE-2026-73078)

1. backport-CVE-2026-73078-1.patch

• 状态: 适配成功 (status=adapted)
• 置信度: high
• 冲突说明: File path relocation: runtime/pack/dist/opt/netrw/autoload/netrw.vim -> runtime/autoload/netrw.vim (vim 9.0 vs 9.2 directory structure). Context adaptation: baseline uses 5-space indentation and tab characters in exe strings, original patch uses 16-space indentation and spaces. Skipped version.c (patch numbers 839/840 from vim 9.2 vs 2061-2070 from vim 9.0 - cosmetic version marker, not security-relevant). Skipped 'Last Change' date hunk (line not present in baseline header). All 6 security changes applied: (1) added | to g:netrw_menu_escape, (2) renamed bmd->ebmd and added fbmd=fnameescape for bookmark menu, (3) added ehistdir=fnameescape for history menu, (4) MakeTgt uses escape(string(bmd),'|') instead of raw quotes, (5) MakeTgt uses escape(string(histentry),'|'), (6) deletion menu uses ebmd.

CVE-2026-73078

是否需要修复：是
是否存在适配：是
上游社区补丁：无

分支修复情况：
1.master(9.2.0782):
2.openEuler-20.03-LTS-SP4(9.0):
3.openEuler-22.03-LTS-SP4(9.0):
4.openEuler-24.03-LTS-Next(9.0.2092):
5.openEuler-24.03-LTS-SP1(9.0.2092):
6.openEuler-24.03-LTS-SP3(9.0.2092):
7.openEuler-24.03-LTS-SP4(9.0.2092):

PR：

• openEuler-24.03-LTS: https://gitcode.com/src-openeuler/vim/merge_requests/974

补丁适配报告 (CVE-2026-73078)

1. backport-CVE-2026-73078-1.patch

• 状态: 适配成功 (status=adapted)
• 置信度: high
• 冲突说明: File renamed/moved: runtime/pack/dist/opt/netrw/autoload/netrw.vim -> runtime/autoload/netrw.vim, adapted context (lines 555/4793-4794/4797/4800/4817-4818/9400/9420 vs orig 375/3777-3780/3799/7152/7170); preserved TAB separators (source=TAB, patch=spaces); Skipped 2 non-critical hunks (Hunk1: Last Change cosmetic line absent in 9.0.2092; Hunk7: version.c patch#840 already exists at line 3216, context mismatch at target line 758 which holds 2072/2071)

CVE-2026-73078

是否需要修复：是
是否存在适配：是
上游社区补丁：无

分支修复情况：
1.openEuler-20.03-LTS-SP4(9.0): 已修复

PR：

• openEuler-20.03-LTS-SP4: https://gitcode.com/src-openeuler/vim/merge_requests/975

补丁适配报告 (CVE-2026-73078)

1. backport-CVE-2026-73078-1.patch

• 状态: 适配成功 (status=adapted)
• 置信度: high
• 冲突说明: File moved: runtime/pack/dist/opt/netrw/autoload/netrw.vim -> runtime/autoload/netrw.vim, adapted context; version.c context adapted (expected 839, baseline has 679); skipped 1 cosmetic hunk (Last Change date). Baseline netrw Version 171 (Aug 2021) vs upstream 9.2.0840 (Jul 2026) — same logical functions, different line offsets. All 6 security hunks applied: (1) g:netrw_menu_escape add '|' at line 556; (2) bookmark menu: bmd->ebmd, add fbmd=fnameescape(bmd), :e uses fbmd at lines 4761-4767; (3) history menu: add ehistdir=fnameescape(), :e uses ehistdir at lines 4782-4784; (4) targets bookmark: MakeTgt uses string() instead of raw single-quote at line 9307; (5) targets history: MakeTgt uses string() at line 9327; (6) version.c: add 840 before 679 at line 737. Tab separators preserved (baseline uses tabs, patch uses spaces — only variable names swapped). Decho comment lines untouched.

影响性分析说明:
Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Targets menu entries by interpolating attacker-controlled directory paths into executed :menu commands. s:NetrwBookmarkMenu(), s:NetrwTgtMenu(), g:netrw_menu_escape, EX_TRLBAR, and netrw#MakeTgt() fail to neutralize the | command separator or single quotes at five construction sites, allowing a crafted path browsed or bookmarked in GUI Vim to execute arbitrary Ex and operating-system commands. This issue is fixed in version 9.2.0840.

openEuler评分: (评分和向量)
8.6
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

受影响版本排查(受影响/不受影响):
1.master(9.2.0843):不受影响
2.openEuler-20.03-LTS-SP4(9.0):受影响
3.openEuler-22.03-LTS-SP4(9.0):受影响
4.openEuler-24.03-LTS-Next(9.0.2092):受影响
5.openEuler-24.03-LTS-SP1(9.0.2092):受影响
6.openEuler-24.03-LTS-SP3(9.0.2092):受影响
7.openEuler-24.03-LTS-SP4(9.0.2092):受影响

修复是否涉及abi变化(是/否)：
1.master(9.2.0843):否
2.openEuler-20.03-LTS-SP4(9.0):否
3.openEuler-22.03-LTS-SP4(9.0):否
4.openEuler-24.03-LTS-Next(9.0.2092):否
5.openEuler-24.03-LTS-SP1(9.0.2092):否
6.openEuler-24.03-LTS-SP3(9.0.2092):否
7.openEuler-24.03-LTS-SP4(9.0.2092):否

原因说明：
1.master(9.2.0843):不受影响-已有内置的内联控制或缓解措施
2.openEuler-20.03-LTS-SP4(9.0):正常修复
3.openEuler-22.03-LTS-SP4(9.0):正常修复
4.openEuler-24.03-LTS-Next(9.0.2092):正常修复
5.openEuler-24.03-LTS-SP1(9.0.2092):正常修复
6.openEuler-24.03-LTS-SP3(9.0.2092):正常修复
7.openEuler-24.03-LTS-SP4(9.0.2092):正常修复

@lvying6 经过 cve-manager 解析, 已分析的内容如下表所示:

请确认分析内容的准确性, 确认无误后, 您可以进行后续步骤, 否则您可以继续分析.

经过cve-manager解析，部分分支PR未合入，如红色字体所示：

原因说明：
1.master:不受影响-已有内置的内联控制或缓解措施
2.openEuler-20.03-LTS-SP4:正常修复(PR未合入)
3.openEuler-22.03-LTS-SP4:正常修复(PR未合入)
4.openEuler-24.03-LTS-Next:正常修复(PR未合入)
5.openEuler-24.03-LTS-SP1:正常修复(PR未合入)
6.openEuler-24.03-LTS-SP3:正常修复(PR未合入)
7.openEuler-24.03-LTS-SP4:正常修复(PR未合入)

CVE-2026-73078

是否需要修复：是
是否存在适配：是
上游社区补丁：无

分支修复情况：
1.openEuler-22.03-LTS-SP4(9.0): 已修复

PR：

• openEuler-22.03-LTS-SP4: https://gitcode.com/src-openeuler/vim/merge_requests/976

补丁适配报告 (CVE-2026-73078)

1. backport-CVE-2026-73078-1.patch

• 状态: 适配成功 (status=adapted)
• 置信度: high
• 冲突说明: B2 (file path mismatch) + context adaptation. File path redirected: runtime/pack/dist/opt/netrw/autoload/netrw.vim -> runtime/autoload/netrw.vim (12739 lines). 6 of 7 hunks adapted (hunks 2-7), hunk 1 skipped (cosmetic Last Change date update — baseline has completely different header format with Date/Version/Maintainer, no Last Change line). Line number offsets due to different file versions: hunk2 375->556, hunk3 3777->4761, hunk4 3799->4783, hunk5 7152->9304, hunk6 7170->9325, hunk7 758->736. Baseline uses literal tab characters (0x09) in exe lines where original patch uses spaces; different indentation levels (4-6 spaces vs 12-24 spaces); extra commented-out Decho() debug lines in baseline included as additional context lines. version.c: baseline latest patch is 679 (not 839), added 840 before 679. All security changes preserved verbatim: | added to g:netrw_menu_escape, fnameescape() + ebmd/fbmd variables in NetrwBookmarkMenu, fnameescape() for history in NetrwBookmarkMenu, string()+escape(...,'|') in NetrwTgtMenu. Over-adaptation score 0: only path+line+context adaptation, zero structural changes.

经过cve-manager解析，部分分支PR未合入，如红色字体所示：

原因说明：
1.master:不受影响-已有内置的内联控制或缓解措施
2.openEuler-20.03-LTS-SP4:正常修复
3.openEuler-22.03-LTS-SP4:正常修复
4.openEuler-24.03-LTS-Next:正常修复(PR未合入)
5.openEuler-24.03-LTS-SP1:正常修复(PR未合入)
6.openEuler-24.03-LTS-SP3:正常修复(PR未合入)
7.openEuler-24.03-LTS-SP4:正常修复