{"id":"CLSA-2026-1782999239","summary":"vim: Fix of 4 CVEs","details":"- CVE-2026-55693: bound the trie-descent depth counter against the\n  MAXWLEN-element stack arrays in tree_count_words() to prevent an\n  out-of-bounds write when reading a crafted spell file\n  (src/spellfile.c, upstream vim 9.2.0653)\n- CVE-2026-55892: bound the trie-descent depth counter in dump_prefixes()\n  to prevent a stack out-of-bounds write with a crafted .spl spell file\n  (src/spell.c, upstream vim 9.2.0662)\n- CVE-2026-57455: bound the single-byte SOFO result copy in\n  spell_soundfold_sofo() to MAXWLEN-1 to prevent a stack out-of-bounds\n  write when sound-folding long words (src/spell.c, upstream vim 9.2.0698)\n- CVE-2026-57456: use repr() on reconstructed docstrings in the python3\n  omni-completion so a hostile buffer cannot break out of the\n  triple-quoted literal and execute arbitrary Python during completion\n  (runtime/autoload/python3complete.vim, upstream vim 9.2.0699)","modified":"2026-10-26T09:30:10.691088178Z","published":"2026-07-02T13:34:20Z","upstream":["CVE-2026-55693","CVE-2026-55892","CVE-2026-57455","CVE-2026-57456"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1782999239.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55693"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55892"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57455"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57456"}],"affected":[{"package":{"name":"vim-X11","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-X11?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782999239.json"}},{"package":{"name":"vim-common","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-common?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782999239.json"}},{"package":{"name":"vim-enhanced","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-enhanced?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782999239.json"}},{"package":{"name":"vim-filesystem","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-filesystem?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782999239.json"}},{"package":{"name":"vim-minimal","ecosystem":"TuxCare:AlmaLinux:9.2","purl":"pkg:rpm/tuxcare/vim-minimal?distro=almalinux-9.2"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.2.2637-22.el9_2.1.tuxcare.els37"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1782999239.json"}}],"schema_version":"1.9.0"}