38 matches found
CLSA-2026-1792153017 vim: Fix of 91 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries upstream 9.2.0840...
CLSA-2026-1791489381 vim: Fix of 2 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries upstream 9.2.0840...
CLSA-2026-1791427864 vim: Fix of 3 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member upstream 9.2.0847 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu...
vim: Fix of 3 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member upstream 9.2.0847 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu...
CLSA-2026-1791488919 vim: Fix of 2 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu entries upstream 9.2.0840...
CLSA-2026-1791426968 vim: Fix of 3 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo with a crafted spell file upstream 9.2.0846 - CVE-2026-73076: fix arbitrary command execution via a crafted .VimballRecord vimball member upstream 9.2.0847 - CVE-2026-73078: fix Ex command injection via crafted netrw bookmark/history menu...
vim security update
9.1.083-9.0.1.el102.22 - Remove upstream references Orabug: 31197557 2:9.1.083-9.22 - RHEL-271045 ex command injection via crafted filename in signjump 2:9.1.083-9.21 - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion 2:9.1.083-9.20 - RHEL-253668 CVE-2026-28420...
AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1789603817)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789603817 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting...
AlmaLinux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789466646)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789466646 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting...
CentOS Linux 8.5 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1789464719)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1789464719 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without resetting...
CentOS Linux 8 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1789464785)
The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1789464785 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0846, setsofo in src/spellfile.c reuses slsalfirst without...
vim: Vim: Heap buffer overflow allows arbitrary code execution
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...
vim: Vim: Heap buffer overflow allows arbitrary code execution
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...
vim: Vim: Heap buffer overflow allows arbitrary code execution
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...
vim: Vim: Heap buffer overflow allows arbitrary code execution
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...
CLSA-2026-1789466646 vim: Fix of 3 CVEs
CVE-2026-73072: reset slsalfirst in setsofo so a spell file with an SNSAL section before an SNSOFO section cannot under-count the mapping lists and write past the allocation - CVE-2026-73076: forbid a .VimballRecord member filename and only execute well-formed delete commands when removing a...
CLSA-2026-1789464785 vim: Fix of 3 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo; reset slsalfirst before the SNSOFO counting loop, since a preceding SNSAL section may have set its entries to -1 via setsalfirst, making the loop under-count colliding multi-byte characters and allocate an undersized list src/spellfile.c,...
CLSA-2026-1789464361 vim: Fix of 3 CVEs
CVE-2026-73072: fix heap buffer overflow in setsofo; reset slsalfirst before the SNSOFO counting loop, since a preceding SNSAL section may have set its entries to -1 via setsalfirst, making the loop under-count colliding multi-byte characters and allocate an undersized list src/spellfile.c,...
vim: Vim: Heap buffer overflow allows arbitrary code execution
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...
vim: Vim: Heap buffer overflow allows arbitrary code execution
A heap buffer overflow in Vim allows a local attacker to cause a denial of service or potentially execute arbitrary code. The flaw is triggered by processing a specially crafted spell file, where the setsofo function fails to reset internal data between sections, leading to an out-of-bounds write...