{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "* SECURITY UPDATE: command injection in the tar plugin: tar#Vimuntar()\n escaped the tarball name with shellescape() without the special\n argument before running gunzip/gzip through :!, so characters that Vim\n expands in a :! command line (such as % and #) survived in the name\n and let a crafted archive name run arbitrary shell commands.\n - debian/patches/CVE-2026-46483.patch: use the shellescape(name, 1)\n form for both :! invocations in runtime/autoload/tar.vim; matches\n upstream patch 9.2.0479.\n - CVE-2026-46483\n * SECURITY UPDATE: code injection via netrw directory history:\n s:NetrwBookHistSave() serialised each history entry into\n ~/.vim/.netrwhist by wrapping the value in single quotes with string\n concatenation, so a directory name containing a single quote closed\n the literal and injected Vimscript that ran when the history file was\n sourced on the next netrw start.\n - debian/patches/CVE-2026-47162.patch: encode the value with string()\n in runtime/autoload/netrw.vim; matches upstream patch 9.2.0495.\n - CVE-2026-47162\n * SECURITY UPDATE: code execution through Python omni-completion:\n pythoncomplete and python3complete rebuilt the buffer's Python code\n and passed it to exec(), including the import and from statements\n harvested from the buffer, so invoking omni-completion in a hostile\n Python file executed arbitrary module-level code.\n - debian/patches/CVE-2026-52858.patch: skip import/from statements\n unless g:pythoncomplete_allow_import is set, in both\n runtime/autoload/pythoncomplete.vim and python3complete.vim;\n matches upstream patches 9.2.0561 and 9.2.0568, the latter being\n required for the opt-in to take effect at all.\n - CVE-2026-52858\n * SECURITY UPDATE: out-of-bounds access when a terminal buffer is\n snapshotted: the per-cell loop in move_terminal_to_buffer() walked\n cell.chars[] with no upper bound, and libvterm leaves that array\n unterminated when a cell uses all VTERM_MAX_CHARS_PER_CELL slots (a\n base character plus five combining marks), so it read past the array\n and appended the out-of-bounds values to a buffer sized for far fewer\n bytes.\n - debian/patches/CVE-2026-52859.patch: bound the loop with\n i < VTERM_MAX_CHARS_PER_CELL and size the buffer for six 6-byte\n characters, in src/terminal.c; matches upstream patch 9.2.0565\n together with its prerequisite 8.1.0611, without which the bounded\n loop would still overrun the MB_MAXBYTES-sized buffer.\n - CVE-2026-52859\n * SECURITY UPDATE: code execution through Python omni-completion\n definition headers: Scope.get_code() reproduced def and class headers\n verbatim in the source handed to exec(), and Python evaluates\n parameter default values, annotations and base-class expressions at\n definition time, so crafted headers ran arbitrary code during\n completion even with imports disabled.\n - debian/patches/CVE-2026-52860.patch: strip default values and\n annotations from parameters and accept only dotted names as base\n classes, in both runtime/autoload/pythoncomplete.vim and\n python3complete.vim; matches upstream patch 9.2.0597.\n - CVE-2026-52860\n * SECURITY UPDATE: out-of-bounds write reading a crafted spell file:\n tree_count_words() and sug_filltree() descended the word trie without\n bounding the depth, so a deeply nested trie wrote past the ends of\n their MAXWLEN-sized arridx[], curi[] and wordcount[] arrays.\n - debian/patches/CVE-2026-55693.patch: only descend while\n depth < MAXWLEN - 1 in both trie walkers, in src/spellfile.c;\n matches upstream patch 9.2.0653.\n - CVE-2026-55693\n * SECURITY UPDATE: code injection when netrw opens a remote file:\n s:NetrwBrowse() passed bufname() unescaped into an :execute'd \"b\"\n command, so a buffer name containing the Ex command separator ran\n arbitrary Ex commands.\n - debian/patches/CVE-2026-55895.patch: escape the name with\n fnameescape() in runtime/autoload/netrw.vim; matches the applicable\n hunk of upstream patch 9.2.0663.\n - CVE-2026-55895\n * SECURITY UPDATE: out-of-bounds write in SOFO soundfolding:\n spell_soundfold_sofo() walked the input word without checking the\n index into its MAXWLEN-sized result buffer, so a crafted spell file\n with a long SOFO translation wrote past the end of it.\n - debian/patches/CVE-2026-57455.patch: add the ri < MAXWLEN - 1 abort\n condition to the translation loop, in src/spell.c; matches upstream\n patch 9.2.0698.\n - CVE-2026-57455\n * SECURITY UPDATE: code execution via doc strings in Python\n omni-completion: get_code() wrapped the doc string harvested from the\n buffer in triple quotes, so a doc string containing a triple quote\n closed the literal and the remainder was executed as code during\n completion.\n - debian/patches/CVE-2026-57456.patch: quote doc strings with repr()\n at all three generation sites in both\n runtime/autoload/pythoncomplete.vim and python3complete.vim;\n matches upstream patch 9.2.0699.\n - CVE-2026-57456\n * SECURITY UPDATE: arbitrary Ex command execution during C\n omni-completion: s:StructMembers() interpolated the typeref field of a\n tags entry into a :vimgrep pattern run through :execute, so a crafted\n tags file could close the pattern and append an Ex command that ran\n when C omni-completion was invoked on a hostile source file.\n - debian/patches/CVE-2026-59858.patch: escape the type field with\n escape(typename, '/\\') before building the pattern, in\n runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0735.\n - CVE-2026-59858\n * SECURITY UPDATE: the escaping above is not sufficient on its own: an\n unclosed bracket in the typeref makes :vimgrep's pattern skipping\n fail, after which a bar in the tag value is again treated as a command\n separator and executed.\n - debian/patches/CVE-2026-73073.patch: match the field literally with\n \\V ... \\m instead of relying on escaping alone, in\n runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0845.\n - CVE-2026-73073", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/ubuntu18.04els/advisories/2026/clsa-2026_1787394930.json" } ], "tracking": { "current_release_date": "2026-08-22T10:36:59Z", "generator": { "date": "2026-08-22T10:36:59Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1787394930", "initial_release_date": "2026-08-22T10:36:59Z", "revision_history": [ { "date": "2026-08-22T10:36:59Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "Fix of 10 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu 18.04", "product": { "name": "Ubuntu 18.04", "product_id": "Ubuntu-18", "product_identification_helper": { "cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*" } } } ], "category": "product_family", "name": "Ubuntu" } ], "category": "vendor", "name": "Canonical Ltd." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product": { "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_id": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gtk3@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product": { "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_id": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-athena@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product": { "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_id": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-tiny@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product": { "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_id": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-nox@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product": { "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_id": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gtk@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product": { "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_id": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product": { "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_id": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/xxd@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=amd64" } } }, { "category": "product_version", "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gtk@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-athena@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/xxd@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-tiny@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gtk3@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product": { "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_id": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-nox@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "category": "product_version", "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product": { "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_id": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-common@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product": { "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_id": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-runtime@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product": { "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_id": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gnome@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product": { "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_id": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-doc@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product": { "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_id": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gui-common@2:8.0.1453-1ubuntu1.13%2Btuxcare.els2?arch=all" } } }, { "category": "product_version", "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gui-common@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-doc@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-gnome@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-common@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } }, { "category": "product_version", "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product": { "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_id": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "product_identification_helper": { "purl": "pkg:deb/cloudlinux/vim-runtime@2:8.0.1453-1ubuntu1.13%2Btuxcare.els1?arch=all" } } } ], "category": "architecture", "name": "all" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" }, "product_reference": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" }, "product_reference": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" }, "product_reference": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all" }, "product_reference": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" }, "product_reference": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" }, "product_reference": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" }, "product_reference": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all" }, "product_reference": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all" }, "product_reference": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all" }, "product_reference": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" }, "product_reference": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all" }, "product_reference": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all" }, "product_reference": "vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "relates_to_product_reference": "Ubuntu-18" }, { "category": "default_component_of", "full_product_name": { "name": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64 as a component of Ubuntu 18.04", "product_id": "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" }, "product_reference": "vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "relates_to_product_reference": "Ubuntu-18" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-57456", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-57456" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8", "url": "https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0699", "url": "https://github.com/vim/vim/releases/tag/v9.2.0699" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3", "url": "https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3" } ], "release_date": "2026-06-25T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-25T16:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-59858", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entry, without escaping, into a :vimgrep pattern that is run through :execute. Because :vimgrep honors the bar as a command separator, a crafted tag field can close the search pattern and append an arbitrary Ex command; opening a hostile .c file whose project tags file contains such an entry and invoking C omni-completion runs that command as the editing user. This issue is fixed in version 9.2.0735.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-59858" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e", "url": "https://github.com/vim/vim/commit/6b611b0d15603c52ebdad17172b0232b4f65704e" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x", "url": "https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x" } ], "release_date": "2026-07-09T23:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-07-09T23:17:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-55895", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when deleting a local file from the browser. A filename derived from the buffer's directory listing is interpolated into an Ex command line passed to :execute with only the backslash character escaped, allowing a crafted filename containing a bar (|) to terminate the intended command and execute arbitrary Vimscript, including shell commands via :call system() and :!. This vulnerability is fixed in 9.2.0663.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-55895" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2", "url": "https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0663", "url": "https://github.com/vim/vim/releases/tag/v9.2.0663" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh", "url": "https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh" } ], "release_date": "2026-06-25T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-25T16:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-46483", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in\nruntime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-46483" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1", "url": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0479", "url": "https://github.com/vim/vim/releases/tag/v9.2.0479" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w", "url": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w" } ], "release_date": "2026-05-15T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-05-15T15:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-57455", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri with no upper bound and terminates only on the input NUL, writing one byte per input byte into the MAXWLEN-element stack buffer the caller provides. A word longer than MAXWLEN, passed to soundfold() (or reached via sound-based spell suggestion) while a SOFO-based spell language is active, therefore writes past the end of that buffer. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0698.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-57455" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b", "url": "https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0698", "url": "https://github.com/vim/vim/releases/tag/v9.2.0698" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4", "url": "https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4" } ], "release_date": "2026-06-25T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-25T16:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-47162", "cwe": { "id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name derived from the filesystem is interpolated into a single-quoted Vimscript string literal without escaping embedded single quotes, allowing a crafted directory name to break out of the string context and execute arbitrary Vimscript, including shell commands via system() and :!, the next time the history file is sourced. This issue has been patched in version 9.2.0495.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-47162" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b", "url": "https://github.com/vim/vim/commit/f08ab2f4d7d2947c8dd6c179ae08ee6146a2694b" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0495", "url": "https://github.com/vim/vim/releases/tag/v9.2.0495" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c", "url": "https://github.com/vim/vim/security/advisories/GHSA-crm5-rh6j-2c7c" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38509", "url": "https://access.redhat.com/errata/RHSA-2026:38509" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38510", "url": "https://access.redhat.com/errata/RHSA-2026:38510" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:38511", "url": "https://access.redhat.com/errata/RHSA-2026:38511" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:53371", "url": "https://access.redhat.com/errata/RHSA-2026:53371" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:54769", "url": "https://access.redhat.com/errata/RHSA-2026:54769" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:55431", "url": "https://access.redhat.com/errata/RHSA-2026:55431" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-47162", "url": "https://access.redhat.com/security/cve/CVE-2026-47162" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487964" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47162.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47162.json" } ], "release_date": "2026-06-11T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-11T19:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-52858", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-52858" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d", "url": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0561", "url": "https://github.com/vim/vim/releases/tag/v9.2.0561" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c", "url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c" } ], "release_date": "2026-06-11T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-11T19:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-52860", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. Python evaluates function default values, parameter annotations, and class base expressions at definition time, so a hostile buffer can execute attacker-controlled Python expressions during omni-completion. The existing g:pythoncomplete_allow_import mitigation (GHSA-52mc-rq6p-rc7c) does not cover this path, because the attacker-controlled code is not a harvested import/from statement. This issue has been patched in version 9.2.0597.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-52860" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2", "url": "https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0597", "url": "https://github.com/vim/vim/releases/tag/v9.2.0597" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c", "url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468", "url": "https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-52860", "url": "https://access.redhat.com/security/cve/CVE-2026-52860" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2487987", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487987" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52860.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52860.json" } ], "release_date": "2026-06-11T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-11T19:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-55693", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to 9.2.0653, the tree_count_words() function in src/spellfile.c fills in the word-count fields of a spell-file word trie by walking it iteratively with a depth counter. The counter is bounded only by the trie structure itself; it is never checked against the size of the fixed MAXWLEN-element stack arrays it indexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair, loaded when the user invokes spell suggestion, can drive the descent arbitrarily deep, so the function writes past the end of those arrays. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0653.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-55693" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7", "url": "https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0653", "url": "https://github.com/vim/vim/releases/tag/v9.2.0653" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq", "url": "https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq" } ], "release_date": "2026-06-25T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-25T16:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-52859", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "Vim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars[] array with no upper bound, stopping only when it encounters a NUL terminator. When a cell legitimately fills all VTERM_MAX_CHARS_PER_CELL (6) slots — a base character plus five combining marks — the bundled libvterm returns the array without a terminating NUL, so the loop reads past the fixed six-element array and appends the out-of-bounds values to a buffer reserved for only six characters. A program whose output is rendered inside a :terminal window can trigger this with a short byte sequence and no Vim scripting, leading to a crash. This issue has been patched in version 9.2.0565.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "known_affected": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-52859" }, { "category": "external", "summary": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19", "url": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19" }, { "category": "external", "summary": "https://github.com/vim/vim/releases/tag/v9.2.0565", "url": "https://github.com/vim/vim/releases/tag/v9.2.0565" }, { "category": "external", "summary": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm", "url": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm" } ], "release_date": "2026-06-11T19:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-08-22T10:35:31.822666Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els2.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els2.amd64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1787394930" }, { "category": "none_available", "date": "2026-06-11T19:16:00Z", "details": "Affected", "product_ids": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "Ubuntu-18:vim-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-athena-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-doc-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gnome-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-gtk-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gtk3-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-gui-common-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-nox-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:vim-runtime-2:8.0.1453-1ubuntu1.13+tuxcare.els1.all", "Ubuntu-18:vim-tiny-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64", "Ubuntu-18:xxd-2:8.0.1453-1ubuntu1.13+tuxcare.els1.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }