[ALSA-2026:48650] Important: vim security update
Type:
security
Severity:
important
Release date:
2026-08-03
Description:
Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): * vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455) * vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456) * vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693) * vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856) * vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 vim-enhanced-9.1.083-9.el10_2.12.aarch64.rpm 4b398190dd889152c155117a7b6382b39d87e63cd67e79a800f60d06b6badce3
aarch64 xxd-9.1.083-9.el10_2.12.aarch64.rpm 8de0cbfc5604799eef56aba714d8cc6e86960c9d9d6a751a8bd7022ae4b2c103
aarch64 vim-common-9.1.083-9.el10_2.12.aarch64.rpm cce60fc8141233c58a1c4bf8f5b4b7fb9a28445cb2a17747fa866d0a6b2738c8
aarch64 vim-X11-9.1.083-9.el10_2.12.aarch64.rpm de3a1655f08e36b50e763133998c3f3e55f8357e537f34d562f675215cc52d62
aarch64 vim-minimal-9.1.083-9.el10_2.12.aarch64.rpm e461c315befff6a65a1e16ba0841f3cf0ffff788e8272a35f689ae88939b290c
noarch vim-filesystem-9.1.083-9.el10_2.12.noarch.rpm 3c2582457904d55da8957534beb9b5db4fa1b5fd46336818b97f1c75a18ae61c
noarch vim-data-9.1.083-9.el10_2.12.noarch.rpm 5b736089a07c6439dc37a021c32026bbdfb8e24b93fb34abc79149c62f187f16
ppc64le xxd-9.1.083-9.el10_2.12.ppc64le.rpm 3b55444f22fbdd7bfa85d343e4c3e36e8b3119acad8ef2cac77b7760a7d07d04
ppc64le vim-minimal-9.1.083-9.el10_2.12.ppc64le.rpm 46878d2da26d388254e861f273dcbf9314e7122814a13a71c3fc1e6c32bfcdad
ppc64le vim-common-9.1.083-9.el10_2.12.ppc64le.rpm a2f870e5cf645586d6dfdf9af082f03be9d5cfdce66cb9c9bec8dd9be3a1a3f1
ppc64le vim-enhanced-9.1.083-9.el10_2.12.ppc64le.rpm c00ae20048e2d369692fec674cb4917b586f9c78e47a7ae2db07df6c3502c172
ppc64le vim-X11-9.1.083-9.el10_2.12.ppc64le.rpm d4ac03aee13eb065fcc4e110c6e07e7e3c413709d56cf290ab911c399f56d250
s390x vim-minimal-9.1.083-9.el10_2.12.s390x.rpm 0b3be6d13776a2cd532323790284ee8d5482c0a51e2e26bea641e5e71b9a47f1
s390x vim-X11-9.1.083-9.el10_2.12.s390x.rpm 182400944a639da59299530ecb3ea59049beb8b36aa545888a122fd5dfad1cc4
s390x vim-common-9.1.083-9.el10_2.12.s390x.rpm 1c15d960b62ff0931b0629bd51dce6074926869a11ec1467096ef53d176725f3
s390x xxd-9.1.083-9.el10_2.12.s390x.rpm c63bc9fdf869ae269dceca88c4af91406c4a194e537ce6f94c6b1c1ef9d28db7
s390x vim-enhanced-9.1.083-9.el10_2.12.s390x.rpm d44e8062da05510bf03680e6c8f2f488169ea1b26d6dd303858cd4cf900ee1e7
x86_64 vim-enhanced-9.1.083-9.el10_2.12.x86_64.rpm 17c023366cd6bc85c91bedb173ba097d25bc368933d82052e0af27e33f4ef636
x86_64 vim-X11-9.1.083-9.el10_2.12.x86_64.rpm 3b910f034b00e32c34d6870e7599809968782a0eae1657ec8ef9251309eb1dad
x86_64 xxd-9.1.083-9.el10_2.12.x86_64.rpm 65c811aa17f4e86867265c69086a26b4649dd3e4a55e0c027d818ca911b64f08
x86_64 vim-minimal-9.1.083-9.el10_2.12.x86_64.rpm d8508ffdbe8ee4e456d994b54008ce5997941205f698c578c2969decde14f93f
x86_64 vim-common-9.1.083-9.el10_2.12.x86_64.rpm dd50411d3d69e3bf6cc28f3b184a6ceb62e24cd70c0f6583ce8a67d66887cd85
x86_64_v2 vim-minimal-9.1.083-9.el10_2.12.x86_64_v2.rpm 2feee74fc46eab2dc469adb5af88b6d8c17905c45d5a9ba2e176c29b2a7b43f7
x86_64_v2 vim-enhanced-9.1.083-9.el10_2.12.x86_64_v2.rpm 50ad672efdc2df4ef8c88f9e51afb36c1b1a7238fe6ecf4e0e336854db8c2449
x86_64_v2 xxd-9.1.083-9.el10_2.12.x86_64_v2.rpm 560e6b4bc2fc2335bbd243471a8055c985a71c73e87c89ec19047a417008ecec
x86_64_v2 vim-X11-9.1.083-9.el10_2.12.x86_64_v2.rpm 6e3d2eac70e13ea7520bbc453314b0d6d09c7c785faad12b0c09deddb475355d
x86_64_v2 vim-common-9.1.083-9.el10_2.12.x86_64_v2.rpm e7825c480444fb15a84ff596b569f98ce0610b0b1e55e9b16f76d94116a7f66d
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.