Ubuntu alert USN-8451-1 (vim)
| From: | noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-8451-1] Vim vulnerabilities | |
| Date: | Thu, 18 Jun 2026 18:33:35 +0000 | |
| Message-ID: | <E1waHYV-0004Zj-P4@lists.ubuntu.com> | |
| Cc: | noreply+usn-bot@canonical.com |
========================================================================== Ubuntu Security Notice USN-8451-1 June 18, 2026 vim vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: Several security issues were fixed in Vim. Software Description: - vim: Vi IMproved - enhanced vi editor Details: Srinivas Piskala Ganesh Babu discovered that Vim incorrectly handled directory names when serializing browsed paths to the netrw history file. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-47162) It was discovered that Vim incorrectly handled step-definition patterns in the cucumber filetype plugin. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-47167) It was discovered that Vim incorrectly handled import statements during Python omni-completion. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-52858) Andrej Tomči discovered that Vim incorrectly handled certain terminal screen cells when taking a snapshot, leading to an out-of-bounds read. An attacker could possibly use this issue to cause Vim to crash, resulting in a denial of service. (CVE-2026-52859) David Carliez discovered that Vim incorrectly handled reconstructed function and class definitions during Python omni-completion. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-52860) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS vim 2:9.1.2141-1ubuntu4.5 vim-common 2:9.1.2141-1ubuntu4.5 vim-gtk3 2:9.1.2141-1ubuntu4.5 vim-gui-common 2:9.1.2141-1ubuntu4.5 vim-motif 2:9.1.2141-1ubuntu4.5 vim-nox 2:9.1.2141-1ubuntu4.5 vim-runtime 2:9.1.2141-1ubuntu4.5 vim-tiny 2:9.1.2141-1ubuntu4.5 xxd 2:9.1.2141-1ubuntu4.5 Ubuntu 25.10 vim 2:9.1.0967-1ubuntu6.7 vim-athena 2:9.1.0967-1ubuntu6.7 vim-common 2:9.1.0967-1ubuntu6.7 vim-gtk3 2:9.1.0967-1ubuntu6.7 vim-gui-common 2:9.1.0967-1ubuntu6.7 vim-motif 2:9.1.0967-1ubuntu6.7 vim-nox 2:9.1.0967-1ubuntu6.7 vim-runtime 2:9.1.0967-1ubuntu6.7 vim-tiny 2:9.1.0967-1ubuntu6.7 xxd 2:9.1.0967-1ubuntu6.7 Ubuntu 24.04 LTS vim 2:9.1.0016-1ubuntu7.16 vim-athena 2:9.1.0016-1ubuntu7.16 vim-common 2:9.1.0016-1ubuntu7.16 vim-gtk3 2:9.1.0016-1ubuntu7.16 vim-gui-common 2:9.1.0016-1ubuntu7.16 vim-motif 2:9.1.0016-1ubuntu7.16 vim-nox 2:9.1.0016-1ubuntu7.16 vim-runtime 2:9.1.0016-1ubuntu7.16 vim-tiny 2:9.1.0016-1ubuntu7.16 xxd 2:9.1.0016-1ubuntu7.16 Ubuntu 22.04 LTS vim 2:8.2.3995-1ubuntu2.32 vim-athena 2:8.2.3995-1ubuntu2.32 vim-common 2:8.2.3995-1ubuntu2.32 vim-gtk 2:8.2.3995-1ubuntu2.32 vim-gtk3 2:8.2.3995-1ubuntu2.32 vim-gui-common 2:8.2.3995-1ubuntu2.32 vim-nox 2:8.2.3995-1ubuntu2.32 vim-runtime 2:8.2.3995-1ubuntu2.32 vim-tiny 2:8.2.3995-1ubuntu2.32 xxd 2:8.2.3995-1ubuntu2.32 Ubuntu 20.04 LTS vim 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-athena 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-common 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-gtk 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-gtk3 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-gui-common 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-nox 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-runtime 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro vim-tiny 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro xxd 2:8.1.2269-1ubuntu5.32+esm8 Available with Ubuntu Pro Ubuntu 18.04 LTS vim 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-athena 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-common 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-gnome 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-gtk 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-gtk3 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-gui-common 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-nox 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-runtime 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro vim-tiny 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro xxd 2:8.0.1453-1ubuntu1.13+esm20 Available with Ubuntu Pro Ubuntu 16.04 LTS vim 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-athena 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-athena-py2 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-common 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-gnome 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-gnome-py2 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-gtk 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-gtk-py2 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-gtk3 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-gtk3-py2 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-gui-common 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-nox 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-nox-py2 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-runtime 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro vim-tiny 2:7.4.1689-3ubuntu1.5+esm35 Available with Ubuntu Pro Ubuntu 14.04 LTS vim 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-athena 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-common 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-gnome 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-gtk 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-gui-common 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-lesstif 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-nox 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-runtime 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro vim-tiny 2:7.4.052-1ubuntu3.1+esm29 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8451-1 CVE-2026-47162, CVE-2026-47167, CVE-2026-52858, CVE-2026-52859, CVE-2026-52860 Package Information: https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubun... https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubun... https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubun... https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubun...
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmo0NlIACgkQcpJm3tlz hgH0Rg/8C7vMPTs5mv9SFHdmMcO4OLJcOeWHCGSrh7/AnShjvZ+n7fziI+suqP5Q bwg7WUCtrFv+BnDv5/spBtkngv+JQ+VPLuPGSm+Wve6o5Z3R92SGFOPc7+YPcKGC LYYD4m58IttSpmODwkHboXJCqhAvaq8o0alYHZaGvlC1FITOfILKVQdfiK1+b8yU Tz7tbI249DKSNgl13hI4SmDfLWYKF++CCWekoQHHHnuH6eiPMM+PZw97A+/oBfh6 MVgwdui6NgOQqlpiznhQJWB60AVb+khSjFrGvBJR4itP7doYBSNkt+5pACfFPUSJ iZljPiJdK8mBEunQr8oANcitUgFlmwFiUovo9bQekaz1f8wy+/eVHRgx6fXA7F77 uVkeNOrqtsuajWA+qBXdXJdN3mQ0BWvVvI2DHkm/33gz41rv5HrHh+TLo8bJN68U mCbb6M5JfQ/ZgWEZSGHd0uApTaiTjsj88aHIOT7JXQJ4MvGrbp21ZTAr6J3rIH5V 24p+pAAIqMNASj27WGqIZQoLk0/5N/oruZsRNovBKaN032qTa+BcHTOh0xeVsniV upq6zq7X9A8UXfeYGiBuB6FO03Xji2LyG50gvdRWYZr3/OFzww3xfJvV3XxC5fRZ d/NAeWvv6ltTUu5I03Cakx93UQ4yfQByR+aQ3WT9zqTCdKS0zUA= =4clr -----END PGP SIGNATURE-----