OESA-2025-1166

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1166
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1166.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1166
Upstream
Published
2025-02-21T13:37:01Z
Modified
2025-08-12T05:49:13.815966Z
Summary
vim security update
Details

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctly reset the visual mode before opening other windows and buffers and therefore fix this bug. In addition it does verify that it won't try to access a position if the position is greater than the corresponding buffer line. Impact is medium since the user must have switched on visual mode when executing the :all ex command. The Vim project would like to thank github user gandalf4a for reporting this issue. The issue has been fixed as of Vim patch v9.1.1003(CVE-2025-22134)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS-SP1 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-16.oe2403sp1

Ecosystem specific 

{
    "src": [
        "vim-9.0.2092-16.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-common-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-debuginfo-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-debugsource-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-enhanced-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-minimal-9.0.2092-16.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-common-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-debuginfo-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-debugsource-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-enhanced-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-minimal-9.0.2092-16.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0.2092-16.oe2403sp1.noarch.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-31.oe2003sp4

Ecosystem specific 

{
    "src": [
        "vim-9.0-31.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-31.oe2003sp4.x86_64.rpm",
        "vim-common-9.0-31.oe2003sp4.x86_64.rpm",
        "vim-debuginfo-9.0-31.oe2003sp4.x86_64.rpm",
        "vim-debugsource-9.0-31.oe2003sp4.x86_64.rpm",
        "vim-enhanced-9.0-31.oe2003sp4.x86_64.rpm",
        "vim-minimal-9.0-31.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-31.oe2003sp4.aarch64.rpm",
        "vim-common-9.0-31.oe2003sp4.aarch64.rpm",
        "vim-debuginfo-9.0-31.oe2003sp4.aarch64.rpm",
        "vim-debugsource-9.0-31.oe2003sp4.aarch64.rpm",
        "vim-enhanced-9.0-31.oe2003sp4.aarch64.rpm",
        "vim-minimal-9.0-31.oe2003sp4.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0-31.oe2003sp4.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-31.oe2203sp3

Ecosystem specific 

{
    "src": [
        "vim-9.0-31.oe2203sp3.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-31.oe2203sp3.x86_64.rpm",
        "vim-common-9.0-31.oe2203sp3.x86_64.rpm",
        "vim-debuginfo-9.0-31.oe2203sp3.x86_64.rpm",
        "vim-debugsource-9.0-31.oe2203sp3.x86_64.rpm",
        "vim-enhanced-9.0-31.oe2203sp3.x86_64.rpm",
        "vim-minimal-9.0-31.oe2203sp3.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-31.oe2203sp3.aarch64.rpm",
        "vim-common-9.0-31.oe2203sp3.aarch64.rpm",
        "vim-debuginfo-9.0-31.oe2203sp3.aarch64.rpm",
        "vim-debugsource-9.0-31.oe2203sp3.aarch64.rpm",
        "vim-enhanced-9.0-31.oe2203sp3.aarch64.rpm",
        "vim-minimal-9.0-31.oe2203sp3.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0-31.oe2203sp3.noarch.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-31.oe2203sp4

Ecosystem specific 

{
    "src": [
        "vim-9.0-31.oe2203sp4.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-31.oe2203sp4.x86_64.rpm",
        "vim-common-9.0-31.oe2203sp4.x86_64.rpm",
        "vim-debuginfo-9.0-31.oe2203sp4.x86_64.rpm",
        "vim-debugsource-9.0-31.oe2203sp4.x86_64.rpm",
        "vim-enhanced-9.0-31.oe2203sp4.x86_64.rpm",
        "vim-minimal-9.0-31.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-31.oe2203sp4.aarch64.rpm",
        "vim-common-9.0-31.oe2203sp4.aarch64.rpm",
        "vim-debuginfo-9.0-31.oe2203sp4.aarch64.rpm",
        "vim-debugsource-9.0-31.oe2203sp4.aarch64.rpm",
        "vim-enhanced-9.0-31.oe2203sp4.aarch64.rpm",
        "vim-minimal-9.0-31.oe2203sp4.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0-31.oe2203sp4.noarch.rpm"
    ]
}

openEuler:24.03-LTS / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-16.oe2403

Ecosystem specific 

{
    "src": [
        "vim-9.0.2092-16.oe2403sp1.src.rpm",
        "vim-9.0.2092-16.oe2403.src.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-common-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-debuginfo-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-debugsource-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-enhanced-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-minimal-9.0.2092-16.oe2403sp1.x86_64.rpm",
        "vim-X11-9.0.2092-16.oe2403.x86_64.rpm",
        "vim-common-9.0.2092-16.oe2403.x86_64.rpm",
        "vim-debuginfo-9.0.2092-16.oe2403.x86_64.rpm",
        "vim-debugsource-9.0.2092-16.oe2403.x86_64.rpm",
        "vim-enhanced-9.0.2092-16.oe2403.x86_64.rpm",
        "vim-minimal-9.0.2092-16.oe2403.x86_64.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-common-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-debuginfo-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-debugsource-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-enhanced-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-minimal-9.0.2092-16.oe2403sp1.aarch64.rpm",
        "vim-X11-9.0.2092-16.oe2403.aarch64.rpm",
        "vim-common-9.0.2092-16.oe2403.aarch64.rpm",
        "vim-debuginfo-9.0.2092-16.oe2403.aarch64.rpm",
        "vim-debugsource-9.0.2092-16.oe2403.aarch64.rpm",
        "vim-enhanced-9.0.2092-16.oe2403.aarch64.rpm",
        "vim-minimal-9.0.2092-16.oe2403.aarch64.rpm"
    ],
    "noarch": [
        "vim-filesystem-9.0.2092-16.oe2403sp1.noarch.rpm",
        "vim-filesystem-9.0.2092-16.oe2403.noarch.rpm"
    ]
}