{"schemaVersion":3,"id":"MGASA-2026-0240","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated vim packages fix security vulnerabilities\n\nThe updated packages fix security vulnerabilities:\nArbitrary Code Execution via Python Omni-Completion in Vim < 9.2.0561.\n(CVE-2026-52858)\nOut-of-bounds Read in Terminal Screen Snapshot in Vim < 9.2.0565.\n(CVE-2026-52859)\nArbitrary Code Execution via Python Omni-Completion in Vim < 9.2.0597.\n(CVE-2026-52860)\nOut-of-bounds Write in Spell File Word Count in Vim < 9.2.0653.\n(CVE-2026-55693)\nOut-of-bounds Write in Spell File Prefix Dump in Vim < 9.2.0662.\n(CVE-2026-55892)\nVimscript Code Injection in netrw NetrwLocalRmFile() via crafted\nfilename affects Vim < 9.2.0663. (CVE-2026-55895)\nOut-of-bounds Read in Text Property Count in Vim < 9.2.0670.\n(CVE-2026-57451)\nOut-of-bounds Read with libsodium-encrypted Files in Vim < 9.2.0671.\n(CVE-2026-57452)\nPowerShell Command Injection in zip.vim via Crafted Archive Entry Names\nin Vim > 9.1.1783 && Vim < 9.2.0678. (CVE-2026-57453)\nOut-of-bounds Read with Text Properties in Vim >= 9.2.0320 && Vim <\n9.2.0679. (CVE-2026-57454)\nOut-of-bounds Write in SOFO Soundfolding in Vim < 9.2.0698.\n(CVE-2026-57455)\nArbitrary Code Execution via Python Omni-Completion Docstrings in Vim <\n9.2.0699. (CVE-2026-57456)","dates":{"published":"2026-07-10T15:41:14.000Z","modified":"2026-07-10T15:45:04.007Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"vim","name":"vim","label":"vim","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/vim","purlType":"rpm","versions":[{"text":"< 9.2.782-1.mga10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.782-1.mga10","eol":null,"hubHref":null},{"vendor":"mageia","product":"vim","name":"vim","label":"vim","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/vim","purlType":"rpm","versions":[{"text":"< 9.2.782-1.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.782-1.mga9","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2026-0240.html","label":"advisories.mageia.org/MGASA-2026-0240.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35580","label":"bugs.mageia.org/show_bug.cgi?id=35580","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/22/13","label":"www.openwall.com/lists/oss-security/2026/05/22/13","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-3h95-3962-mmvf","label":"github.com/vim/vim/security/advisories/GHSA-3h95-3962-mmvf","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/29/5","label":"www.openwall.com/lists/oss-security/2026/05/29/5","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c","label":"github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/05/30/4","label":"www.openwall.com/lists/oss-security/2026/05/30/4","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm","label":"github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/04/14","label":"www.openwall.com/lists/oss-security/2026/06/04/14","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468","label":"github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/15/8","label":"www.openwall.com/lists/oss-security/2026/06/15/8","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq","label":"github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/16/12","label":"www.openwall.com/lists/oss-security/2026/06/16/12","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h","label":"github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/16/13","label":"www.openwall.com/lists/oss-security/2026/06/16/13","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh","label":"github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/17/10","label":"www.openwall.com/lists/oss-security/2026/06/17/10","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw","label":"github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/18/7","label":"www.openwall.com/lists/oss-security/2026/06/18/7","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486","label":"github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/20/2","label":"www.openwall.com/lists/oss-security/2026/06/20/2","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf","label":"github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/20/3","label":"www.openwall.com/lists/oss-security/2026/06/20/3","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w","label":"github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/21/1","label":"www.openwall.com/lists/oss-security/2026/06/21/1","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4","label":"github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/21/2","label":"www.openwall.com/lists/oss-security/2026/06/21/2","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3","label":"github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/24/9","label":"www.openwall.com/lists/oss-security/2026/06/24/9","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2","label":"github.com/vim/vim/security/advisories/GHSA-m3hf-xcm3-xhm2","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/27/6","label":"www.openwall.com/lists/oss-security/2026/06/27/6","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x","label":"github.com/vim/vim/security/advisories/GHSA-mf92-v4xw-j45x","hostname":"github.com","tags":["Advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2026/06/28/1","label":"www.openwall.com/lists/oss-security/2026/06/28/1","hostname":"www.openwall.com","tags":["WEB"]},{"url":"https://github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97","label":"github.com/vim/vim/security/advisories/GHSA-fh26-8f79-wj97","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2026-52858","CVE-2026-52859","CVE-2026-52860","CVE-2026-55693","CVE-2026-55892","CVE-2026-55895","CVE-2026-57451","CVE-2026-57452","CVE-2026-57453","CVE-2026-57454","CVE-2026-57455","CVE-2026-57456"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-07-10T15:41:14.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-10T15:45:04.007Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:31:33.967Z","stale":false,"partial":false}}