Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 41: FEDORA-2025-a71acb72e9 Critical: vim Heap-Use-After-Free

fedora
Calendar Grey February 21, 2025
Dist Fedora Esm H88
Stay informed about the newest security enhancements for vim in Fedora 41, specifically targeting a severe heap-use-after-free vulnerability linked to CVE-2025-26603.
The newest upstream commit Security fix for CVE-2025-26603

Summary

VIM (VIsual editor iMproved) is an updated and improved version of the

vi editor. Vi was the first real screen-based editor for UNIX, and is

still very popular. VIM improves on vi by adding new features:

multiple windows, multi-level undo, block highlighting and more.

Update Information:

The newest upstream commit Security fix for CVE-2025-26603

Topics%20covered

Topics Covered

security advisory critical issue software update Fedora security fix vim heap-use-after-free CVE-2025-26603

Change Log

* Wed Feb 19 2025 Zdenek Dohnal - 2:9.1.1122-1 - patchlevel 1122

References


[ 1 ] Bug #2346611 - CVE-2025-26603 vim: heap-use-after-free in function str_to_reg in vim/vim [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2346611

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-a71acb72e9' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: vim
Product: Fedora 41
Version: 9.1.1122
Release: 1.fc41
URL: http://www.vim.org/
Summary: The VIM editor

Topics%20covered

Topics Covered

security advisory critical issue software update Fedora security fix vim heap-use-after-free CVE-2025-26603

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here