ALSA-2026:47982

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455)
• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)
• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)
• vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)
• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.