OESA-2025-1231

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1231
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1231.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1231
Upstream
Published
2025-02-28T15:34:56Z
Modified
2025-08-12T05:48:48.969589Z
Summary
vim security update
Details

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems.

Security Fix(es):

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.(CVE-2025-1215)

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of :display to a register, Vim will free the register content before storing the new content in the register. Now when redirecting the :display command to a register that is being displayed, Vim will free the content while shortly afterwards trying to access it, which leads to a use-after-free. Vim pre 9.1.1115 checks in the ex_display() function, that it does not try to redirect to a register while displaying this register at the same time. However this check is not complete, and so Vim does not check the + and * registers (which typically donate the X11/clipboard registers, and when a clipboard connection is not possible will fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting to register zero when trying to redirect to the clipboard registers * or +. Users are advised to upgrade. There are no known workarounds for this vulnerability.(CVE-2025-26603)

Database specific 
{
    "severity": "Medium"
}
References

Affected packages

openEuler:24.03-LTS / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-17.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0.2092-17.oe2403.noarch.rpm",
        "vim-filesystem-9.0.2092-17.oe2403sp1.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-17.oe2403.aarch64.rpm",
        "vim-common-9.0.2092-17.oe2403.aarch64.rpm",
        "vim-debuginfo-9.0.2092-17.oe2403.aarch64.rpm",
        "vim-debugsource-9.0.2092-17.oe2403.aarch64.rpm",
        "vim-enhanced-9.0.2092-17.oe2403.aarch64.rpm",
        "vim-minimal-9.0.2092-17.oe2403.aarch64.rpm",
        "vim-X11-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-common-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-debuginfo-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-debugsource-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-enhanced-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-minimal-9.0.2092-17.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-17.oe2403.x86_64.rpm",
        "vim-common-9.0.2092-17.oe2403.x86_64.rpm",
        "vim-debuginfo-9.0.2092-17.oe2403.x86_64.rpm",
        "vim-debugsource-9.0.2092-17.oe2403.x86_64.rpm",
        "vim-enhanced-9.0.2092-17.oe2403.x86_64.rpm",
        "vim-minimal-9.0.2092-17.oe2403.x86_64.rpm",
        "vim-X11-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-common-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-debuginfo-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-debugsource-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-enhanced-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-minimal-9.0.2092-17.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "vim-9.0.2092-17.oe2403.src.rpm",
        "vim-9.0.2092-17.oe2403sp1.src.rpm"
    ]
}

openEuler:24.03-LTS-SP1 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0.2092-17.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0.2092-17.oe2403sp1.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-common-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-debuginfo-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-debugsource-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-enhanced-9.0.2092-17.oe2403sp1.aarch64.rpm",
        "vim-minimal-9.0.2092-17.oe2403sp1.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-common-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-debuginfo-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-debugsource-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-enhanced-9.0.2092-17.oe2403sp1.x86_64.rpm",
        "vim-minimal-9.0.2092-17.oe2403sp1.x86_64.rpm"
    ],
    "src": [
        "vim-9.0.2092-17.oe2403sp1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-32.oe2003sp4

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-32.oe2003sp4.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-32.oe2003sp4.aarch64.rpm",
        "vim-common-9.0-32.oe2003sp4.aarch64.rpm",
        "vim-debuginfo-9.0-32.oe2003sp4.aarch64.rpm",
        "vim-debugsource-9.0-32.oe2003sp4.aarch64.rpm",
        "vim-enhanced-9.0-32.oe2003sp4.aarch64.rpm",
        "vim-minimal-9.0-32.oe2003sp4.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-32.oe2003sp4.x86_64.rpm",
        "vim-common-9.0-32.oe2003sp4.x86_64.rpm",
        "vim-debuginfo-9.0-32.oe2003sp4.x86_64.rpm",
        "vim-debugsource-9.0-32.oe2003sp4.x86_64.rpm",
        "vim-enhanced-9.0-32.oe2003sp4.x86_64.rpm",
        "vim-minimal-9.0-32.oe2003sp4.x86_64.rpm"
    ],
    "src": [
        "vim-9.0-32.oe2003sp4.src.rpm"
    ]
}

openEuler:22.03-LTS-SP3 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-32.oe2203sp3

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-32.oe2203sp3.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-32.oe2203sp3.aarch64.rpm",
        "vim-common-9.0-32.oe2203sp3.aarch64.rpm",
        "vim-debuginfo-9.0-32.oe2203sp3.aarch64.rpm",
        "vim-debugsource-9.0-32.oe2203sp3.aarch64.rpm",
        "vim-enhanced-9.0-32.oe2203sp3.aarch64.rpm",
        "vim-minimal-9.0-32.oe2203sp3.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-32.oe2203sp3.x86_64.rpm",
        "vim-common-9.0-32.oe2203sp3.x86_64.rpm",
        "vim-debuginfo-9.0-32.oe2203sp3.x86_64.rpm",
        "vim-debugsource-9.0-32.oe2203sp3.x86_64.rpm",
        "vim-enhanced-9.0-32.oe2203sp3.x86_64.rpm",
        "vim-minimal-9.0-32.oe2203sp3.x86_64.rpm"
    ],
    "src": [
        "vim-9.0-32.oe2203sp3.src.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / vim

Package

Name
vim
Purl
pkg:rpm/openEuler/vim&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.0-32.oe2203sp4

Ecosystem specific 

{
    "noarch": [
        "vim-filesystem-9.0-32.oe2203sp4.noarch.rpm"
    ],
    "aarch64": [
        "vim-X11-9.0-32.oe2203sp4.aarch64.rpm",
        "vim-common-9.0-32.oe2203sp4.aarch64.rpm",
        "vim-debuginfo-9.0-32.oe2203sp4.aarch64.rpm",
        "vim-debugsource-9.0-32.oe2203sp4.aarch64.rpm",
        "vim-enhanced-9.0-32.oe2203sp4.aarch64.rpm",
        "vim-minimal-9.0-32.oe2203sp4.aarch64.rpm"
    ],
    "x86_64": [
        "vim-X11-9.0-32.oe2203sp4.x86_64.rpm",
        "vim-common-9.0-32.oe2203sp4.x86_64.rpm",
        "vim-debuginfo-9.0-32.oe2203sp4.x86_64.rpm",
        "vim-debugsource-9.0-32.oe2203sp4.x86_64.rpm",
        "vim-enhanced-9.0-32.oe2203sp4.x86_64.rpm",
        "vim-minimal-9.0-32.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "vim-9.0-32.oe2203sp4.src.rpm"
    ]
}