RLSA-2026:48650

Vim (Vi IMproved) is an updated and improved version of the vi editor.

Security Fix(es):

• vim: Vim: Denial of Service via stack out-of-bounds write in spellsoundfoldsofo() (CVE-2026-57455)

• vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456)

• vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693)

• vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion (CVE-2026-59856)

• vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.