This security update addresses multiple high-severity vulnerabilities (CVSS 7.8) in Vim, including arbitrary code execution via malicious Python docstrings or crafted C tags files during omni-completion, and denial of service via out-of-bounds writes in spell-checking functions. The vulnerabilities affect Vim versions prior to 9.2.0699, 9.2.0698, and 9.2.0653, depending on the specific CVE. Users must upgrade to Vim version 9.2.0699 or later to remediate all listed issues.
Red Hat Product Errata RHSA-2026:48703 - Security Advisory Issued: 2026-07-30 Updated: 2026-07-30 RHSA-2026:48703 - Security Advisory Overview Updated Packages Synopsis Important: vim security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for vim is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Vim (Vi IMproved) is an updated and improved version of the vi editor. Security Fix(es): vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() (CVE-2026-57455) vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion (CVE-2026-57456) vim: Vim: Out-of-bounds Write in Spell File Word Count (CVE-2026-55693) vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion (CVE-2026-59858) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2492968 - CVE-2026-57455 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo() BZ - 2492972 - CVE-2026-57456 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion BZ - 2492980 - CVE-2026-55693 vim: Vim: Out-of-bounds Write in Spell File Word Count BZ - 2498868 - CVE-2026-59858 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion CVEs CVE-2026-55693 CVE-2026-57455 CVE-2026-57456 CVE-2026-59858 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM vim-8.0.1763-31.el8_10.src.rpm SHA-256: 77ed6347db27ad3131016cbb288ddc666eab3a17c7c539d7ddc980ad41305857 x86_64 vim-X11-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 56a0c301f098f0cb6ebaf9f62b45b14fabf1ecd83de94f3a42776e7b02a8274a vim-X11-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: e716d4bfd61d021cc1210be5f8be2490b1b914427e9de0a123ecda9742916a2e vim-X11-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: e716d4bfd61d021cc1210be5f8be2490b1b914427e9de0a123ecda9742916a2e vim-common-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 1fbe8b4c8dc191db61497b4a66c5d25c8bde842a3363887ecda77fbd1241497d vim-common-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 750e82625e24efbe55d28fe0907416d8961c107ff3dccad29c20ca20fc5ddea4 vim-common-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 750e82625e24efbe55d28fe0907416d8961c107ff3dccad29c20ca20fc5ddea4 vim-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 5841b3443adaaf8de4701f425272f4f9244ceff2dfdec5b1c6a0bbc35fe4bd36 vim-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 5841b3443adaaf8de4701f425272f4f9244ceff2dfdec5b1c6a0bbc35fe4bd36 vim-debugsource-8.0.1763-31.el8_10.x86_64.rpm SHA-256: bc9031d6fef9b1cf4c210345ab8d63b58f161b46ba2514bc12ceda9a0050f622 vim-debugsource-8.0.1763-31.el8_10.x86_64.rpm SHA-256: bc9031d6fef9b1cf4c210345ab8d63b58f161b46ba2514bc12ceda9a0050f622 vim-enhanced-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 1e8833a197d833dfa6a22e84b0f2ce186b3f7039003cdba7108511b3d5ce9cee vim-enhanced-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 789ad64c64021ccb73999937c59c4289291e48ed870850b653968b0b09a55646 vim-enhanced-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 789ad64c64021ccb73999937c59c4289291e48ed870850b653968b0b09a55646 vim-filesystem-8.0.1763-31.el8_10.noarch.rpm SHA-256: 982fde604dcd79da6889fb0da13343464a8211ee297dc1906d6d06bd40c2b3e5 vim-minimal-8.0.1763-31.el8_10.x86_64.rpm SHA-256: f595ea1c2cd78bae474e05ebcbc102b54e114b20a47833096832ada54a6b041b vim-minimal-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 250723fb018502f6b6468a724c462c440daa2130c4a5c721fcb560eca6e5ca52 vim-minimal-debuginfo-8.0.1763-31.el8_10.x86_64.rpm SHA-256: 250723fb018502f6b6468a724c462c440daa2130c4a5c721fcb560eca6e5ca52 Red Hat Enterprise Linux for IBM z Systems 8 SRPM vim-8.0.1763-31.el8_10.src.rpm SHA-256: 77ed6347db27ad3131016cbb288ddc666eab3a17c7c539d7ddc980ad41305857 s390x vim-X11-8.0.1763-31.el8_10.s390x.rpm SHA-256: d4c77d951ab50cc08a1e41f4eefb5f9f3c62a937ec4afcc996db8ac85a15d10b vim-X11-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: e583a1040f711f5b4aff2ecc119fc56f4408339f408a8762963fbea3e4380d89 vim-X11-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: e583a1040f711f5b4aff2ecc119fc56f4408339f408a8762963fbea3e4380d89 vim-common-8.0.1763-31.el8_10.s390x.rpm SHA-256: 0a25392bd90c2d88f9ed68a6635ab5d645f7d67504f6a38ba3f8c938753a2cfb vim-common-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: 19e537f4884545637b7c4dfcda9fc54b00c6cc001a0a55abcf20f56448c596c5 vim-common-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: 19e537f4884545637b7c4dfcda9fc54b00c6cc001a0a55abcf20f56448c596c5 vim-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: 6178b1077208cf3e1a90726decf5abf4c558985378122928a9d9e8b7e9c64da1 vim-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: 6178b1077208cf3e1a90726decf5abf4c558985378122928a9d9e8b7e9c64da1 vim-debugsource-8.0.1763-31.el8_10.s390x.rpm SHA-256: f90b770e75320d2c140ae61495ef6d642a0087e2c03740a1dd3c6aa683c381c0 vim-debugsource-8.0.1763-31.el8_10.s390x.rpm SHA-256: f90b770e75320d2c140ae61495ef6d642a0087e2c03740a1dd3c6aa683c381c0 vim-enhanced-8.0.1763-31.el8_10.s390x.rpm SHA-256: 3951c28195e8256d0c0518b87f8d9d94ce42a4a0524f9f889c2e82b5e44499a8 vim-enhanced-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: eb5e8b4c32ac6e43be2f9a647af2b77b8628459f7e89f207b77fbadb1391754f vim-enhanced-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: eb5e8b4c32ac6e43be2f9a647af2b77b8628459f7e89f207b77fbadb1391754f vim-filesystem-8.0.1763-31.el8_10.noarch.rpm SHA-256: 982fde604dcd79da6889fb0da13343464a8211ee297dc1906d6d06bd40c2b3e5 vim-minimal-8.0.1763-31.el8_10.s390x.rpm SHA-256: f60880ca5e10d1a04a628957776c8de3a5c0882bb53495e3fb84db9a242eae36 vim-minimal-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: 85d5c22798337bba463eda6b85bdb28bf7359efab382199f69a35cd8b10077d2 vim-minimal-debuginfo-8.0.1763-31.el8_10.s390x.rpm SHA-256: 85d5c22798337bba463eda6b85bdb28bf7359efab382199f69a35cd8b10077d2 Red Hat Enterprise Linux for Power, little endian 8 SRPM vim-8.0.1763-31.el8_10.src.rpm SHA-256: 77ed6347db27ad3131016cbb288ddc666eab3a17c7c539d7ddc980ad41305857 ppc64le vim-X11-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: e19da7cdace164685688f12f6a2ae0a7dfa584d599c37ef7e29793e664331514 vim-X11-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 2411ccf2af0edcc0dc347fd328f7c6fe4f89812a117eb140d94220c1df63412d vim-X11-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 2411ccf2af0edcc0dc347fd328f7c6fe4f89812a117eb140d94220c1df63412d vim-common-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 45be4dbda58e8077703fda46a7b858dc145714df8a9b4d7ba74356080878fea2 vim-common-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 783a5b7627d7dfa47d7f051b27b089a59bd7b5ff84dc6c5c3f5b60891e1d4752 vim-common-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 783a5b7627d7dfa47d7f051b27b089a59bd7b5ff84dc6c5c3f5b60891e1d4752 vim-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: f608f65d69c2364c6ef5355e8c1556a8e3a01e0bfedad23c6fcb8c4f17dc6039 vim-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: f608f65d69c2364c6ef5355e8c1556a8e3a01e0bfedad23c6fcb8c4f17dc6039 vim-debugsource-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 03bc9f7bfe8f0768677a036c38700c657b85bbad470fb4ce906cebe8875a69ce vim-debugsource-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 03bc9f7bfe8f0768677a036c38700c657b85bbad470fb4ce906cebe8875a69ce vim-enhanced-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 2b22d198418e3210b0f9d91312d4230df05ab8186059911f3cd4f3718ea0cb30 vim-enhanced-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: ba68bd2cc82d892b4d594e96c86972d0b11d6d9153991d9e4f0738bfb03aa599 vim-enhanced-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: ba68bd2cc82d892b4d594e96c86972d0b11d6d9153991d9e4f0738bfb03aa599 vim-filesystem-8.0.1763-31.el8_10.noarch.rpm SHA-256: 982fde604dcd79da6889fb0da13343464a8211ee297dc1906d6d06bd40c2b3e5 vim-minimal-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 602e33cf769be720d34d24ef1ee756b91fff2a62d67e9c0156a4b067b296a8ff vim-minimal-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 153d3b786b9fdaa57340bab2943afd6927ffa411a117cccd2820f8a11d227c2b vim-minimal-debuginfo-8.0.1763-31.el8_10.ppc64le.rpm SHA-256: 153d3b786b9fdaa57340bab2943afd6927ffa411a117cccd2820f8a11d227c2b Red Hat Enterprise Linux for ARM 64 8 SRPM vim-8.0.1763-31.el8_10.src.rpm SHA-256: 77ed6347db27ad3131016cbb288ddc666eab3a17c7c539d7ddc980ad41305857 aarch64 vim-X11-8.0.1763-31.el8_10.aarch64.rpm SHA-256: 7d6454f00f5e801ed94b0d6dbb444c0404b0ffc87b936ba16198dfb222b9727d vim-X11-debuginfo-8.0.1763-31.el8_10.aarch64.rpm SHA-256: ad1e465bead215f0348315a0152802e1e6b46f8d14464e481cdcdac92e72192c vim-X11-debuginfo-8.0.1763-31.el8_10.aarch64.rpm SHA-256: ad1e465bead215f0348315a0152802e1e6b46f8d14464e481cdcdac92e72192c vim-common-8.0.1763-31.el8_10.aarch64.rpm SHA-256: 17cc9613e60c645f127f1768c4ccad903128aca7ecfdbc7883d3701cc9efbc