OESA-2026-3027

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3027
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3027.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3027
Upstream
Published
2026-07-19T03:48:06Z
Modified
2026-07-19T04:00:23.554897337Z
Summary
vim security update
Details

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04! or VimCrypt~05! method (xchacha20poly1305, requires the +sodium feature) whose body is shorter than a single libsodium secretstream header, an unsigned length calculation underflows and a subsequent decryption call reads far past the end of the input buffer, crashing Vim. This vulnerability is fixed in 9.2.0671.(CVE-2026-57452)

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spellsoundfoldsofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte map into a caller-owned result buffer. Its copy loop advances the output index ri with no upper bound and terminates only on the input NUL, writing one byte per input byte into the MAXWLEN-element stack buffer the caller provides. A word longer than MAXWLEN, passed to soundfold() (or reached via sound-based spell suggestion) while a SOFO-based spell language is active, therefore writes past the end of that buffer. This is a stack out-of-bounds write that corrupts the call frame and crashes the editor. This vulnerability is fixed in 9.2.0698.(CVE-2026-57455)

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. When reconstructing that source, each scope's docstring is inserted verbatim between triple quotes with no escaping, so a hostile buffer can break out of the triple-quoted literal and execute attacker-controlled Python during omni-completion. This vulnerability is fixed in 9.2.0699.(CVE-2026-57456)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-52.oe2003sp4

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-52.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-52.oe2003sp4.aarch64.rpm",
        "vim-common-9.0-52.oe2003sp4.aarch64.rpm",
        "vim-debuginfo-9.0-52.oe2003sp4.aarch64.rpm",
        "vim-debugsource-9.0-52.oe2003sp4.aarch64.rpm",
        "vim-enhanced-9.0-52.oe2003sp4.aarch64.rpm",
        "vim-minimal-9.0-52.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "vim-9.0-52.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-52.oe2003sp4.x86_64.rpm",
        "vim-common-9.0-52.oe2003sp4.x86_64.rpm",
        "vim-debuginfo-9.0-52.oe2003sp4.x86_64.rpm",
        "vim-debugsource-9.0-52.oe2003sp4.x86_64.rpm",
        "vim-enhanced-9.0-52.oe2003sp4.x86_64.rpm",
        "vim-minimal-9.0-52.oe2003sp4.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3027.json"
openEuler:22.03-LTS-SP4
vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-52.oe2203sp4

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-52.oe2203sp4.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-52.oe2203sp4.aarch64.rpm",
        "vim-common-9.0-52.oe2203sp4.aarch64.rpm",
        "vim-debuginfo-9.0-52.oe2203sp4.aarch64.rpm",
        "vim-debugsource-9.0-52.oe2203sp4.aarch64.rpm",
        "vim-enhanced-9.0-52.oe2203sp4.aarch64.rpm",
        "vim-minimal-9.0-52.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "vim-9.0-52.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-52.oe2203sp4.x86_64.rpm",
        "vim-common-9.0-52.oe2203sp4.x86_64.rpm",
        "vim-debuginfo-9.0-52.oe2203sp4.x86_64.rpm",
        "vim-debugsource-9.0-52.oe2203sp4.x86_64.rpm",
        "vim-enhanced-9.0-52.oe2203sp4.x86_64.rpm",
        "vim-minimal-9.0-52.oe2203sp4.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3027.json"
openEuler:24.03-LTS-SP1
vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-38.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0.2092-38.oe2403sp1.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-38.oe2403sp1.aarch64.rpm",
        "vim-common-9.0.2092-38.oe2403sp1.aarch64.rpm",
        "vim-debuginfo-9.0.2092-38.oe2403sp1.aarch64.rpm",
        "vim-debugsource-9.0.2092-38.oe2403sp1.aarch64.rpm",
        "vim-enhanced-9.0.2092-38.oe2403sp1.aarch64.rpm",
        "vim-minimal-9.0.2092-38.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "vim-9.0.2092-38.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-38.oe2403sp1.x86_64.rpm",
        "vim-common-9.0.2092-38.oe2403sp1.x86_64.rpm",
        "vim-debuginfo-9.0.2092-38.oe2403sp1.x86_64.rpm",
        "vim-debugsource-9.0.2092-38.oe2403sp1.x86_64.rpm",
        "vim-enhanced-9.0.2092-38.oe2403sp1.x86_64.rpm",
        "vim-minimal-9.0.2092-38.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3027.json"
openEuler:24.03-LTS-SP3
vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-38.oe2403sp3

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0.2092-38.oe2403sp3.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-38.oe2403sp3.aarch64.rpm",
        "vim-common-9.0.2092-38.oe2403sp3.aarch64.rpm",
        "vim-debuginfo-9.0.2092-38.oe2403sp3.aarch64.rpm",
        "vim-debugsource-9.0.2092-38.oe2403sp3.aarch64.rpm",
        "vim-enhanced-9.0.2092-38.oe2403sp3.aarch64.rpm",
        "vim-minimal-9.0.2092-38.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "vim-9.0.2092-38.oe2403sp3.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-38.oe2403sp3.x86_64.rpm",
        "vim-common-9.0.2092-38.oe2403sp3.x86_64.rpm",
        "vim-debuginfo-9.0.2092-38.oe2403sp3.x86_64.rpm",
        "vim-debugsource-9.0.2092-38.oe2403sp3.x86_64.rpm",
        "vim-enhanced-9.0.2092-38.oe2403sp3.x86_64.rpm",
        "vim-minimal-9.0.2092-38.oe2403sp3.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3027.json"
openEuler:24.03-LTS-SP4
vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-38.oe2403sp4

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0.2092-38.oe2403sp4.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-38.oe2403sp4.aarch64.rpm",
        "vim-common-9.0.2092-38.oe2403sp4.aarch64.rpm",
        "vim-debuginfo-9.0.2092-38.oe2403sp4.aarch64.rpm",
        "vim-debugsource-9.0.2092-38.oe2403sp4.aarch64.rpm",
        "vim-enhanced-9.0.2092-38.oe2403sp4.aarch64.rpm",
        "vim-minimal-9.0.2092-38.oe2403sp4.aarch64.rpm"
    ],
    "src": [
        "vim-9.0.2092-38.oe2403sp4.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-38.oe2403sp4.x86_64.rpm",
        "vim-common-9.0.2092-38.oe2403sp4.x86_64.rpm",
        "vim-debuginfo-9.0.2092-38.oe2403sp4.x86_64.rpm",
        "vim-debugsource-9.0.2092-38.oe2403sp4.x86_64.rpm",
        "vim-enhanced-9.0.2092-38.oe2403sp4.x86_64.rpm",
        "vim-minimal-9.0.2092-38.oe2403sp4.x86_64.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3027.json"