RLSA-2026:47982

Synopsis

Important: vim security update

Description

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

* vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)

* vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)

* vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)

* vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)

* vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2492968 2492972 2492980 2498867 2498868

CVEs

CVE-2026-55693 CVE-2026-57455 CVE-2026-57456 CVE-2026-59856 CVE-2026-59858

Affected packages

Rocky Linux 9 aarch64 - AppStream

vim-enhanced-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-common-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-common-debuginfo-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-enhanced-debuginfo-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-X11-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-X11-debuginfo-2:8.2.2637-26.el9_8.13.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

vim-enhanced-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-common-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-common-debuginfo-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-enhanced-debuginfo-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-X11-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-X11-debuginfo-2:8.2.2637-26.el9_8.13.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

vim-enhanced-2:8.2.2637-26.el9_8.13.s390x.rpm vim-common-2:8.2.2637-26.el9_8.13.s390x.rpm vim-common-debuginfo-2:8.2.2637-26.el9_8.13.s390x.rpm vim-enhanced-debuginfo-2:8.2.2637-26.el9_8.13.s390x.rpm vim-X11-2:8.2.2637-26.el9_8.13.s390x.rpm vim-X11-debuginfo-2:8.2.2637-26.el9_8.13.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

vim-enhanced-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-common-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-common-debuginfo-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-enhanced-debuginfo-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-X11-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-X11-debuginfo-2:8.2.2637-26.el9_8.13.x86_64.rpm

Rocky Linux 9 x86_64 - BaseOS

vim-2:8.2.2637-26.el9_8.13.src.rpm vim-debuginfo-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-debugsource-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-filesystem-2:8.2.2637-26.el9_8.13.noarch.rpm vim-minimal-2:8.2.2637-26.el9_8.13.x86_64.rpm vim-minimal-debuginfo-2:8.2.2637-26.el9_8.13.x86_64.rpm

Rocky Linux 9 aarch64 - BaseOS

vim-2:8.2.2637-26.el9_8.13.src.rpm vim-debuginfo-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-debugsource-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-filesystem-2:8.2.2637-26.el9_8.13.noarch.rpm vim-minimal-2:8.2.2637-26.el9_8.13.aarch64.rpm vim-minimal-debuginfo-2:8.2.2637-26.el9_8.13.aarch64.rpm

Rocky Linux 9 s390x - BaseOS

vim-2:8.2.2637-26.el9_8.13.src.rpm vim-debuginfo-2:8.2.2637-26.el9_8.13.s390x.rpm vim-debugsource-2:8.2.2637-26.el9_8.13.s390x.rpm vim-filesystem-2:8.2.2637-26.el9_8.13.noarch.rpm vim-minimal-2:8.2.2637-26.el9_8.13.s390x.rpm vim-minimal-debuginfo-2:8.2.2637-26.el9_8.13.s390x.rpm

Rocky Linux 9 ppc64le - BaseOS

vim-2:8.2.2637-26.el9_8.13.src.rpm vim-debuginfo-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-debugsource-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-filesystem-2:8.2.2637-26.el9_8.13.noarch.rpm vim-minimal-2:8.2.2637-26.el9_8.13.ppc64le.rpm vim-minimal-debuginfo-2:8.2.2637-26.el9_8.13.ppc64le.rpm