{"cves":[{"id":"CVE-2026-6094","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T22:17:38.078602+00:00","description":"\nHeap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted\nPKCS7 EnvelopedData. This could theoretically be triggered by\nattacker-supplied data delivered via S/MIME or CMS.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":9.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"LOW"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-6094","https://github.com/wolfSSL/wolfssl/pull/10128 (v5.9.2-stable)"],"bugs":[""],"patches":{"wolfssl":[]},"tags":{},"packages":[{"name":"wolfssl","source":"https://ubuntu.com/security/cve?package=wolfssl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wolfssl","debian":"https://tracker.debian.org/pkg/wolfssl","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-6091","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T22:17:38.078602+00:00","description":"\nPartial-chain certificate verification may accept chains that terminate at\na peer-supplied, untrusted intermediate certificate rather than a trusted\nanchor. An attacker could present a chain that ends at an intermediate they\ncontrol and have it accepted as valid. This affects the OpenSSL\ncompatibility certificate-path-building path (wolfSSL_X509_verify_cert /\nX509_STORE, OPENSSL_EXTRA) when the X509_V_FLAG_PARTIAL_CHAIN verify flag\nis enabled.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-6091","https://github.com/wolfSSL/wolfssl/pull/10170 (v5.9.2-stable)"],"bugs":[""],"patches":{"wolfssl":[]},"tags":{},"packages":[{"name":"wolfssl","source":"https://ubuntu.com/security/cve?package=wolfssl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wolfssl","debian":"https://tracker.debian.org/pkg/wolfssl","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-55967","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T22:12:30.814376+00:00","description":"\nAES-GCM encryption/decryption with extremely large cumulative single\nmessage sizes (>64 GiB) were not properly rejected by the streaming APIs,\nallowing counter wrap, keystream reuse, and consequent plaintext recovery.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.0,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-55967","https://github.com/wolfSSL/wolfssl/pull/10709 (v5.9.2-stable)"],"bugs":[""],"patches":{"wolfssl":[]},"tags":{},"packages":[{"name":"wolfssl","source":"https://ubuntu.com/security/cve?package=wolfssl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wolfssl","debian":"https://tracker.debian.org/pkg/wolfssl","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-55961","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T22:12:30.814376+00:00","description":"\nwolfSSL_PKCS7_verify() returning success for a degenerate (certs-only)\nPKCS#7 object that contains no signer. Such an object has empty\nsignerInfos, so the underlying signed-data verification succeeds without\nauthenticating any content. The compatibility-layer verify path now rejects\nthe object when no signer signature has actually been verified, so a PKCS#7\ncarrying no valid signature is no longer reported as verified. This is\nenforced regardless of the PKCS7_NOVERIFY flag, which only suppresses\nsigner certificate chain validation and was never intended to waive the\nrequirement that a signature exist. Only affects OpenSSL compatibility\nbuilds that call the PKCS7_verify() compatibility API on potentially\ndegenerate PKCS#7 bundles.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-55961","https://github.com/wolfSSL/wolfssl/pull/10702 (v5.9.2-stable)"],"bugs":[""],"patches":{"wolfssl":[]},"tags":{},"packages":[{"name":"wolfssl","source":"https://ubuntu.com/security/cve?package=wolfssl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wolfssl","debian":"https://tracker.debian.org/pkg/wolfssl","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-54679","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T22:11:13.591342+00:00","description":"\njq is a command-line JSON processor. Prior to 1.8.2, on 32bit system,\njvp_string_append has a chance of integer/multiple overflowing and then\ncausing a massive buffer overrun.  This vulnerability is fixed in 1.8.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.9,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-54679","https://github.com/jqlang/jq/security/advisories/GHSA-29gj-222p-j7vx"],"bugs":[""],"patches":{"jq":[]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.2-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-49839","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T21:46:52.112406+00:00","description":"\njq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can\nturn a handled oversized-string error into invalid-state reuse and a real\nheap out-of-bounds write in assertion-disabled builds. When\njv_load_file(raw=1) reads an attacker-controlled file, it repeatedly\nappends file chunks to the same jv string accumulator. Once\njv_string_append_buf() returns jv_invalid_with_msg(\"String too long\"), the\nraw-file loop does not stop. If the file contains at least one more byte,\nthe next loop iteration appends a new chunk to an object that is already\ninvalid. With assertions enabled this aborts in jvp_string_ptr(). With\nassertions disabled, the invalid object is interpreted as a string object\nand ASan reports heap-buffer-overflow. This vulnerability is fixed in\n1.8.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.1,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-49839","https://github.com/jqlang/jq/security/advisories/GHSA-cfh2-vwfq-qfmm"],"bugs":[""],"patches":{"jq":[]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.1-8","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-47770","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T21:45:06.543245+00:00","description":"\njq is a command-line JSON processor. Prior to 1.8.2, comparing two\nsufficiently deeply nested arrays with the == operator exhausts the C stack\non jq's ordinary command-line surface, resulting in denial of service via\nstack exhaustion (uncontrolled recursion). The crash occurs in jq's\nrecursive structural comparison code, with the recursion repeating through\njvp_array_equal() and jv_equal() in src/jv.c when comparing deeply nested\narrays; a nearby sort comparator path through jv_cmp() in src/jv_aux.c\noverflows the stack at a larger nesting depth from  the same missing\nrecursion guard. Anyone running jq comparisons on attacker-controlled\ndeeply nested JSON values, or embedding jq in a context  where untrusted\ndata can reach the == comparison path, is affected. This vulnerability is\nfixed in 1.8.2.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"PASSIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-47770","https://github.com/jqlang/jq/commit/7122866869960b55cea3646bc91334ef55787831","https://github.com/jqlang/jq/pull/3539"],"bugs":[""],"patches":{"jq":[]},"tags":{},"packages":[{"name":"jq","source":"https://ubuntu.com/security/cve?package=jq","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=jq","debian":"https://tracker.debian.org/pkg/jq","statuses":[{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.1-7","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-11999","published":"2026-06-25T18:16:00","updated_at":"2026-06-29T21:09:45.846257+00:00","description":"\nX.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL\ncompatibility certificate verifier (wolfSSL_X509_verify_cert()). This\naffects only builds with --enable-opensslextra whose application calls\nX509_verify_cert() with caller-supplied untrusted intermediates; for those\nusers it is critical, otherwise the library is unaffected. Native wolfSSL\nTLS/DTLS usage is not impacted. X509_verify_cert() returned success based\nonly on the last verified link rather than on reaching a trust anchor: when\nthe supplied chain is deeper than the verifier's maximum path depth\n(default 100), path building runs out of depth while still walking\nuntrusted intermediates and the chain is accepted even though it never\nreaches a configured trust anchor, allowing acceptance of an\nattacker-controlled certificate. The default TLS handshake\n(WOLFSSL_VERIFY_PEER) is not affected; only applications doing manual or\ndeferred verification through this API are.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.2,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-11999"],"bugs":[""],"patches":{"wolfssl":[]},"tags":{},"packages":[{"name":"wolfssl","source":"https://ubuntu.com/security/cve?package=wolfssl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=wolfssl","debian":"https://tracker.debian.org/pkg/wolfssl","statuses":[{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-56123","published":"2026-06-25T17:17:00","updated_at":"2026-07-06T14:53:29.849807+00:00","description":"\nsocat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow\nvulnerability that allows a malicious SOCKS5 proxy server to overwrite\nadjacent heap memory by exploiting a sign-extension flaw in the DOMAINNAME\nreply parser. During connection setup, the domain name length byte is read\nthrough a signed char field causing a negative bytes_to_read value that is\nimplicitly converted to size_t, resulting in an unbounded heap write into\nthe 262-byte reply buffer with attacker-controlled size and content.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":8.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.1,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"NETWORK","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":9.2,"baseSeverity":"CRITICAL"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-56123","https://ubuntu.com/security/notices/USN-8511-1"],"bugs":[""],"patches":{"socat":["upstream: https://repo.or.cz/socat.git/commit/d44cd1cc4fbb70a9ae9e71890024ae8367fcb912","upstream: https://repo.or.cz/socat.git/commit/af5388c898c7bb60997935aee93c223deba60c4a"]},"tags":{},"packages":[{"name":"socat","source":"https://ubuntu.com/security/cve?package=socat","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=socat","debian":"https://tracker.debian.org/pkg/socat","statuses":[{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"1.8.1.2","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"1.8.0.0-4ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"1.8.1.1-1ubuntu0.1","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":["USN-8511-1"],"notices":[{"id":"USN-8511-1","title":"socat vulnerabilities","summary":"Several security issues were fixed in socat.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-06T12:37:17.880104","description":"It was discovered that socat incorrectly handled the SOCKS5 proxy server\nreply parser. A remote attacker could possibly use this issue to execute\narbitrary code. (CVE-2026-56123)\n\nIt was discovered that socat incorrectly handled a sample script. A local\nattacker could possibly use this issue to overwrite arbitrary files. This\nissue only affected Ubuntu 24.04 LTS. (CVE-2024-54661)","is_hidden":false,"release_packages":{"noble":[{"name":"socat","version":"1.8.0.0-4ubuntu0.1","description":"multipurpose relay for bidirectional data transfer","is_source":true},{"name":"socat","version":"1.8.0.0-4ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/socat","version_link":"https://launchpad.net/ubuntu/+source/socat/1.8.0.0-4ubuntu0.1","pocket":"security"}],"resolute":[{"name":"socat","version":"1.8.1.1-1ubuntu0.1","description":"multipurpose relay for bidirectional data transfer","is_source":true},{"name":"socat","version":"1.8.1.1-1ubuntu0.1","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/socat","version_link":"https://launchpad.net/ubuntu/+source/socat/1.8.1.1-1ubuntu0.1","pocket":"security"}]},"type":"USN","cves_ids":["CVE-2024-54661","CVE-2026-56123"]}]},{"id":"CVE-2026-57456","published":"2026-06-25T16:16:00","updated_at":"2026-07-02T19:40:00.437130+00:00","description":"\nVim is an open source, command line text editor. Prior to 9.2.0699, Vim's\nPython omni-completion (runtime/autoload/python3complete.vim and the legacy\npythoncomplete.vim) executes reconstructed function and class definitions\nfrom the current buffer with exec() as part of populating the completion\ndictionary. When reconstructing that source, each scope's docstring is\ninserted verbatim between triple quotes with no escaping, so a hostile\nbuffer can break out of the triple-quoted literal and execute\nattacker-controlled Python during omni-completion. This vulnerability is\nfixed in 9.2.0699.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":8.4,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-57456","https://github.com/vim/vim/security/advisories/GHSA-ppj8-wqjf-6fp3","https://ubuntu.com/security/notices/USN-8500-1"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/cce141c42740f122dd8486ae04e21c2a81016ba8"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0699","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm21","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.32+esm9","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.33","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.17","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:9.1.0967-1ubuntu6.8","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:9.1.2141-1ubuntu4.6","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm30","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm36","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8500-1"],"notices":[{"id":"USN-8500-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T16:46:58.928557","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"}],"resolute":[{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-doc","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-motif","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-nox","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"xxd","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-55895","CVE-2026-57456","CVE-2026-57453","CVE-2026-57452","CVE-2026-35177","CVE-2026-55693","CVE-2026-57455","CVE-2026-55892"]}]},{"id":"CVE-2026-57455","published":"2026-06-25T16:16:00","updated_at":"2026-07-02T19:40:00.437130+00:00","description":"\nVim is an open source, command line text editor. Prior to 9.2.0698, the\nsingle-byte branch of spell_soundfold_sofo() in src/spell.c translates a\nword through a spell file's SOFO (sound-folding) byte map into a\ncaller-owned result buffer. Its copy loop advances the output index ri with\nno upper bound and terminates only on the input NUL, writing one byte per\ninput byte into the MAXWLEN-element stack buffer the caller provides. A\nword longer than MAXWLEN, passed to soundfold() (or reached via sound-based\nspell suggestion) while a SOFO-based spell language is active, therefore\nwrites past the end of that buffer. This is a stack out-of-bounds write\nthat corrupts the call frame and crashes the editor. This vulnerability is\nfixed in 9.2.0698.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":4.0,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-57455","https://github.com/vim/vim/security/advisories/GHSA-q8mh-6qm3-25g4","https://ubuntu.com/security/notices/USN-8500-1"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/497f931f85339d175d7f69588dd249e8ccfed41b"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0698","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm21","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.32+esm9","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.33","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.17","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:9.1.0967-1ubuntu6.8","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:9.1.2141-1ubuntu4.6","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm30","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm36","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8500-1"],"notices":[{"id":"USN-8500-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T16:46:58.928557","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"}],"resolute":[{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-doc","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-motif","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-nox","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"xxd","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-55895","CVE-2026-57456","CVE-2026-57453","CVE-2026-57452","CVE-2026-35177","CVE-2026-55693","CVE-2026-57455","CVE-2026-55892"]}]},{"id":"CVE-2026-57454","published":"2026-06-25T16:16:00","updated_at":"2026-06-30T21:13:35.485903+00:00","description":"\nVim is an open source, command line text editor. From 9.2.0320 until\n9.2.0679, a crafted undo or swap file can store a virtual-text property\nwhose offset and length point outside the line's property data. When Vim\nrestores or displays such a line it converts the offset into a pointer and\nreads the virtual text without bounds checking, causing an out-of-bounds\nread that can crash Vim or disclose adjacent heap memory. This\nvulnerability is fixed in 9.2.0679.","ubuntu_description":"","notes":[{"author":"kkernick","note":"This vulnerability only affects versions >= 9.2.0320."}],"codename":null,"priority":"medium","cvss3":6.1,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":6.1,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":6.8,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-57454","https://github.com/vim/vim/security/advisories/GHSA-ww8h-47xp-hp4w"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/b3faeecc976d3031d7c0675623516ec60c30f949"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0679","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"see notes","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-57453","published":"2026-06-25T16:16:00","updated_at":"2026-07-02T19:40:00.437130+00:00","description":"\nVim is an open source, command line text editor. From 9.1.1784 until\n9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to\nPowerShell to browse, read, extract, update or delete entries in a zip\narchive, it builds the PowerShell command by inserting archive entry names\nthat are quoted only for the shell, not for PowerShell. A crafted entry\nname can break out of the intended string context and cause PowerShell to\nexecute arbitrary commands with the privileges of the user running Vim,\ntriggered by opening, viewing or extracting the archive. This vulnerability\nis fixed in 9.2.0678.","ubuntu_description":"","notes":[{"author":"kkernick","note":"Powershell support in Zip was added in 9.1.1783."}],"codename":null,"priority":"medium","cvss3":6.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-57453","https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf","https://ubuntu.com/security/notices/USN-8500-1"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0678","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"see notes","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:9.1.2141-1ubuntu4.6","component":null,"pocket":"security"}]}],"notices_ids":["USN-8500-1"],"notices":[{"id":"USN-8500-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T16:46:58.928557","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"}],"resolute":[{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-doc","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-motif","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-nox","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"xxd","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-55895","CVE-2026-57456","CVE-2026-57453","CVE-2026-57452","CVE-2026-35177","CVE-2026-55693","CVE-2026-57455","CVE-2026-55892"]}]},{"id":"CVE-2026-57452","published":"2026-06-25T16:16:00","updated_at":"2026-07-02T19:40:00.437130+00:00","description":"\nVim is an open source, command line text editor. Prior to 9.2.0671, when\nVim opens a file encrypted with the VimCrypt~04! or VimCrypt~05!\nmethod (xchacha20poly1305, requires the +sodium feature) whose body is\nshorter than a single libsodium secretstream header, an unsigned length\ncalculation underflows and a subsequent decryption call reads far past the\nend of the input buffer, crashing Vim. This vulnerability is fixed in\n9.2.0671.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-57452","https://github.com/vim/vim/security/advisories/GHSA-c4j9-wr9j-4486","https://ubuntu.com/security/notices/USN-8500-1"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/c8777cec25dcfae89c42e9aff51af61f71c5745f"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0671","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.33","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.17","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:9.1.0967-1ubuntu6.8","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:9.1.2141-1ubuntu4.6","component":null,"pocket":"security"}]}],"notices_ids":["USN-8500-1"],"notices":[{"id":"USN-8500-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T16:46:58.928557","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"}],"resolute":[{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-doc","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-motif","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-nox","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"xxd","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-55895","CVE-2026-57456","CVE-2026-57453","CVE-2026-57452","CVE-2026-35177","CVE-2026-55693","CVE-2026-57455","CVE-2026-55892"]}]},{"id":"CVE-2026-57451","published":"2026-06-25T16:16:00","updated_at":"2026-06-30T19:23:31.494889+00:00","description":"\nVim is an open source, command line text editor. Prior to 9.2.0670,\nget_text_props() in src/textprop.c reads a uint16 property count stored\ninline after a line's text and returns it as the number of 32-byte\ntextprop_T entries that follow. The only check is a floor that guarantees\nroom for a single entry; the count is never checked against the amount of\ndata actually present. A line that declares a large count while carrying\nlittle data causes consumers to read far past the end of the line buffer.\nSuch a line can be delivered through a crafted undo file, leading to a\ncrash. This vulnerability is fixed in 9.2.0670.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.3,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.3,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-57451","https://github.com/vim/vim/security/advisories/GHSA-f36c-2qcp-7gpw"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/b2338ca90643e2f01ecb6547c1172716aaec4f79"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0670","component":null,"pocket":"security"},{"release_codename":"resolute","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"xenial","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"focal","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"jammy","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"noble","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"questing","status":"not-affected","description":"code not present","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-57438","published":"2026-06-25T16:16:00","updated_at":"2026-06-29T22:15:02.972465+00:00","description":"\nNokogiri is an open source XML and HTML library for the Ruby programming\nlanguage. Prior to 1.19.4, XInclude substitution performed by\nNokogiri::XML::Node#do_xinclude replaced each <xi:include> in place,\nfreeing the include node along with its children (such as <xi:fallback> and\nits descendants) and any namespaces declared on them. If an application had\nalready exposed one of those nodes or namespaces to Ruby, the corresponding\nRuby object was left pointing at freed memory. Using the object could\nresult in invalid reads or writes to memory. This vulnerability is fixed in\n1.19.4.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":6.6,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH","baseScore":6.6,"baseSeverity":"MEDIUM"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"NONE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":2.2,"baseSeverity":"LOW"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-57438","https://github.com/sparklemotion/nokogiri/security/advisories/GHSA-wfpw-mmfh-qq69"],"bugs":[""],"patches":{"ruby-nokogiri":[]},"tags":{},"packages":[{"name":"ruby-nokogiri","source":"https://ubuntu.com/security/cve?package=ruby-nokogiri","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=ruby-nokogiri","debian":"https://tracker.debian.org/pkg/ruby-nokogiri","statuses":[{"release_codename":"trusty","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"bionic","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"},{"release_codename":"xenial","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2026-55895","published":"2026-06-25T16:16:00","updated_at":"2026-07-02T19:40:00.437130+00:00","description":"\nVim is an open source, command line text editor. Prior to 9.2.0663, a\nVimscript code injection vulnerability exists in s:NetrwLocalRmFile() in\nthe netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when\ndeleting a local file from the browser. A filename derived from the\nbuffer's directory listing is interpolated into an Ex command line passed\nto :execute with only the backslash character escaped, allowing a crafted\nfilename containing a bar (|) to terminate the intended command and execute\narbitrary Vimscript, including shell commands via :call system() and :!.\nThis vulnerability is fixed in 9.2.0663.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.7,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-55895","https://github.com/vim/vim/security/advisories/GHSA-vhh8-v6wx-hjjh","https://ubuntu.com/security/notices/USN-8500-1"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/55bc757a5d436e59d50fe43f7cda94b118f86cb2"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0663","component":null,"pocket":"security"},{"release_codename":"trusty","status":"not-affected","description":"code not present","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm21","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.32+esm9","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.33","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.17","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:9.1.0967-1ubuntu6.8","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:9.1.2141-1ubuntu4.6","component":null,"pocket":"security"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm36","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8500-1"],"notices":[{"id":"USN-8500-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T16:46:58.928557","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"}],"resolute":[{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-doc","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-motif","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-nox","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"xxd","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-55895","CVE-2026-57456","CVE-2026-57453","CVE-2026-57452","CVE-2026-35177","CVE-2026-55693","CVE-2026-57455","CVE-2026-55892"]}]},{"id":"CVE-2026-55892","published":"2026-06-25T16:16:00","updated_at":"2026-07-02T19:40:00.437130+00:00","description":"\nVim is an open source, command line text editor. Prior to 9.2.0662, the\ndump_prefixes() function in src/spell.c walks a spell-file prefix trie\niteratively with a depth counter while dumping the prefixes that apply to a\nword. The counter is bounded only by the trie structure itself; it is never\nchecked against the size of the fixed MAXWLEN-element stack arrays it\nindexes (prefix[], arridx[], curi[]). A crafted .spl file, loaded when the\nuser dumps the word list, can drive the descent arbitrarily deep, so the\nfunction writes past the end of those arrays. This is a stack out-of-bounds\nwrite that corrupts the call frame and crashes the editor. This\nvulnerability is fixed in 9.2.0662.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":5.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-55892","https://github.com/vim/vim/security/advisories/GHSA-qm9w-fmpj-879h","https://ubuntu.com/security/notices/USN-8500-1"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/8325b193bba5f01e7a7d8241f"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm36","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"upstream","status":"not-affected","description":"9.2.0662","component":null,"pocket":"security"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm21","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.32+esm9","component":null,"pocket":"esm-infra"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.33","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.17","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:9.1.0967-1ubuntu6.8","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:9.1.2141-1ubuntu4.6","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm30","component":null,"pocket":"esm-infra-legacy"}]}],"notices_ids":["USN-8500-1"],"notices":[{"id":"USN-8500-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T16:46:58.928557","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"}],"resolute":[{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-doc","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-motif","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-nox","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"xxd","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-55895","CVE-2026-57456","CVE-2026-57453","CVE-2026-57452","CVE-2026-35177","CVE-2026-55693","CVE-2026-57455","CVE-2026-55892"]}]},{"id":"CVE-2026-55693","published":"2026-06-25T16:16:00","updated_at":"2026-07-02T19:40:00.437130+00:00","description":"\nVim is an open source, command line text editor. Prior to 9.2.0653, the\ntree_count_words() function in src/spellfile.c fills in the word-count\nfields of a spell-file word trie by walking it iteratively with a depth\ncounter. The counter is bounded only by the trie structure itself; it is\nnever checked against the size of the fixed MAXWLEN-element stack arrays it\nindexes (arridx[], curi[], wordcount[]). A crafted .spl/.sug file pair,\nloaded when the user invokes spell suggestion, can drive the descent\narbitrarily deep, so the function writes past the end of those arrays. This\nis a stack out-of-bounds write that corrupts the call frame and crashes the\neditor. This vulnerability is fixed in 9.2.0653.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.8,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"}},"baseMetricV4":{"cvssV4":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U","baseMetrics":{"exploitabilityMetrics":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"NONE","userInteraction":"ACTIVE"},"vulnerableSystemImpactMetrics":{"confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"subsequentSystemImpactMetrics":{"confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"NONE"}},"baseScore":5.7,"baseSeverity":"MEDIUM"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-55693","https://github.com/vim/vim/security/advisories/GHSA-wgh4-64f7-q3jq","https://ubuntu.com/security/notices/USN-8500-1"],"bugs":[""],"patches":{"vim":["upstream: https://github.com/vim/vim/commit/a80874d9b84a01040e3d1aef2d4a59e1934dafb7"]},"tags":{},"packages":[{"name":"vim","source":"https://ubuntu.com/security/cve?package=vim","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=vim","debian":"https://tracker.debian.org/pkg/vim","statuses":[{"release_codename":"upstream","status":"not-affected","description":"9.2.0653","component":null,"pocket":"security"},{"release_codename":"jammy","status":"released","description":"2:8.2.3995-1ubuntu2.33","component":null,"pocket":"security"},{"release_codename":"noble","status":"released","description":"2:9.1.0016-1ubuntu7.17","component":null,"pocket":"security"},{"release_codename":"questing","status":"released","description":"2:9.1.0967-1ubuntu6.8","component":null,"pocket":"security"},{"release_codename":"resolute","status":"released","description":"2:9.1.2141-1ubuntu4.6","component":null,"pocket":"security"},{"release_codename":"trusty","status":"released","description":"2:7.4.052-1ubuntu3.1+esm30","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"xenial","status":"released","description":"2:7.4.1689-3ubuntu1.5+esm36","component":null,"pocket":"esm-infra-legacy"},{"release_codename":"bionic","status":"released","description":"2:8.0.1453-1ubuntu1.13+esm21","component":null,"pocket":"esm-infra"},{"release_codename":"focal","status":"released","description":"2:8.1.2269-1ubuntu5.32+esm9","component":null,"pocket":"esm-infra"}]}],"notices_ids":["USN-8500-1"],"notices":[{"id":"USN-8500-1","title":"Vim vulnerabilities","summary":"Several security issues were fixed in Vim.","instructions":"In general, a standard system update will make all the necessary changes.","references":[],"published":"2026-07-02T16:46:58.928557","description":"It was discovered that Vim incorrectly handled path traversal in the\nzip.vim plugin. An attacker could possibly use this issue to overwrite\narbitrary files. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04\nLTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS.\n(CVE-2026-35177)\n\nIt was discovered that Vim incorrectly handled depth tracking when\nprocessing spell files. An attacker could possibly use this issue to cause\na denial of service. (CVE-2026-55693, CVE-2026-55892)\n\nIt was discovered that Vim incorrectly handled filename escaping in the\nnetrw plugin. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04\nLTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10,\nand Ubuntu 26.04 LTS. (CVE-2026-55895)\n\nIt was discovered that Vim incorrectly handled length calculations when\nopening encrypted files. An attacker could possibly use this issue to cause\na denial of service. This issue only affected Ubuntu 22.04 LTS, Ubuntu\n24.04 LTS, Ubuntu 25.10, and Ubuntu 26.04 LTS. (CVE-2026-57452)\n\nDhruv Vishesh Gupta discovered that Vim incorrectly handled quoting of\narchive entry names. An attacker could possibly use this issue to execute\narbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-57453)\n\nIt was discovered that Vim incorrectly handled bounds checking when\ntranslating words through a byte map. An attacker could possibly use this\nissue to cause a denial of service. (CVE-2026-57455)\n\nChenyuan Mi discovered that Vim incorrectly handled docstring escaping\nduring Python omni-completion. An attacker could possibly use this issue to\nexecute arbitrary code. (CVE-2026-57456)","is_hidden":false,"release_packages":{"bionic":[{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gnome","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.0.1453-1ubuntu1.13+esm21","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"focal":[{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-athena","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-doc","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gtk3","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-gui-common","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-nox","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-runtime","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"vim-tiny","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"},{"name":"xxd","version":"2:8.1.2269-1ubuntu5.32+esm9","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra"}],"jammy":[{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-athena","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-doc","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gtk3","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-gui-common","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-nox","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-runtime","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"vim-tiny","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"},{"name":"xxd","version":"2:8.2.3995-1ubuntu2.33","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.33","pocket":"security"}],"noble":[{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"},{"name":"xxd","version":"2:9.1.0016-1ubuntu7.17","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.17","pocket":"security"}],"questing":[{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-athena","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-doc","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-motif","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-nox","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"},{"name":"xxd","version":"2:9.1.0967-1ubuntu6.8","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.8","pocket":"security"}],"resolute":[{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-doc","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gtk3","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-gui-common","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-motif","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-nox","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-runtime","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"vim-tiny","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"},{"name":"xxd","version":"2:9.1.2141-1ubuntu4.6","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":"https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.6","pocket":"security"}],"trusty":[{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-lesstif","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.052-1ubuntu3.1+esm30","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}],"xenial":[{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","description":"Vi IMproved - enhanced vi editor","is_source":true},{"name":"vim","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-athena-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-doc","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":false,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gnome-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gtk3-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-gui-common","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-nox-py2","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-runtime","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"},{"name":"vim-tiny","version":"2:7.4.1689-3ubuntu1.5+esm36","is_source":false,"is_visible":true,"source_link":"https://launchpad.net/ubuntu/+source/vim","version_link":null,"pocket":"esm-infra-legacy"}]},"type":"USN","cves_ids":["CVE-2026-55895","CVE-2026-57456","CVE-2026-57453","CVE-2026-57452","CVE-2026-35177","CVE-2026-55693","CVE-2026-57455","CVE-2026-55892"]}]},{"id":"CVE-2026-12844","published":"2026-06-25T16:16:00","updated_at":"2026-06-29T21:41:54.174077+00:00","description":"\nList::SomeUtils::XS versions before 0.59 for Perl have a heap buffer\noverflow in the pairwise function.\npairwise() collects the values returned by the block into a heap buffer\nsized to the longer input array, then grows the buffer before each copy\nwith a single quadrupling (alloc <<= 2) instead of a loop. A block call\nthat returns more than four times the current allocation in one invocation\noutgrows that one quadrupling, and the copy writes past the end of the\nbuffer.\nAny caller of pairwise() whose block returns, for a single pair, more than\nfour times the longer input array's length writes past the buffer and\ncorrupts the heap.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2026-12844","https://www.openwall.com/lists/oss-security/2026/06/25/11"],"bugs":[""],"patches":{"liblist-someutils-xs-perl":[]},"tags":{},"packages":[{"name":"liblist-someutils-xs-perl","source":"https://ubuntu.com/security/cve?package=liblist-someutils-xs-perl","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=liblist-someutils-xs-perl","debian":"https://tracker.debian.org/pkg/liblist-someutils-xs-perl","statuses":[{"release_codename":"focal","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"jammy","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"noble","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"resolute","status":"needs-triage","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"0.59-1","component":null,"pocket":"security"},{"release_codename":"questing","status":"ignored","description":"end of life, was needs-triage","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":8840,"limit":20,"total_results":79316}