Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 26.04 LTS Vim Denial of Service Risk with Arbitrary Commands

ubuntu
Calendar Grey July 14, 2026
Dist Ubuntu Esm H88
Security issues in Vim were addressed in Ubuntu updates, ensuring user protection from command execution risks.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

Hirohito Higashi discovered that Vim incorrectly escaped class or trait

names when performing PHP omni-completion. An attacker could possibly

use this issue to trick a user into opening a specially crafted PHP

file and executing arbitrary commands. This issue only affected Ubuntu

22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-59856)

Hirohito Higashi discovered that Vim incorrectly handled sound-folding

of certain words when using a spell file. An attacker could possibly

use this issue to cause Vim to crash, resulting in a denial of service.

(CVE-2026-59857)

It was discovered that Vim incorrectly escaped certain tags file fields

when performing C omni-completion. An attacker could possibly use this

issue to trick a user into opening a specially crafted file and

executing arbitrary commands. (CVE-2026-59858)

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important arbitrary commands vim

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  vim                             2:9.1.2141-1ubuntu4.7
  vim-common                      2:9.1.2141-1ubuntu4.7
  vim-gtk3                        2:9.1.2141-1ubuntu4.7
  vim-gui-common                  2:9.1.2141-1ubuntu4.7
  vim-motif                       2:9.1.2141-1ubuntu4.7
  vim-nox                         2:9.1.2141-1ubuntu4.7
  vim-runtime                     2:9.1.2141-1ubuntu4.7
  vim-tiny                        2:9.1.2141-1ubuntu4.7
  xxd                             2:9.1.2141-1ubuntu4.7

Ubuntu 24.04 LTS
  vim                             2:9.1.0016-1ubuntu7.18
  vim-athena                      2:9.1.0016-1ubuntu7.18
  vim-common                      2:9.1.0016-1ubuntu7.18
  vim-gtk3                        2:9.1.0016-1ubuntu7.18
  vim-gui-common                  2:9.1.0016-1ubuntu7.18
  vim-motif                       2:9.1.0016-1ubuntu7.18
  vim-nox                         2:9.1.0016-1ubuntu7.18
  vim-runtime                     2:9.1.0016-1ubuntu7.18
  vim-tiny                        2:9.1.0016-1ubuntu7.18
  xxd                             2:9.1.0016-1ubuntu7.18

Ubuntu 22.04 LTS
  vim                             2:8.2.3995-1ubuntu2.34
  vim-athena                      2:8.2.3995-1ubuntu2.34
  vim-common                      2:8.2.3995-1ubuntu2.34
  vim-gtk                         2:8.2.3995-1ubuntu2.34
  vim-gtk3                        2:8.2.3995-1ubuntu2.34
  vim-gui-common                  2:8.2.3995-1ubuntu2.34
  vim-nox                         2:8.2.3995-1ubuntu2.34
  vim-runtime                     2:8.2.3995-1ubuntu2.34
  vim-tiny                        2:8.2.3995-1ubuntu2.34
  xxd                             2:8.2.3995-1ubuntu2.34

Ubuntu 20.04 LTS
  vim                             2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-athena                      2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-common                      2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-gtk                         2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-gtk3                        2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-gui-common                  2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-nox                         2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-runtime                     2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  vim-tiny                        2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro
  xxd                             2:8.1.2269-1ubuntu5.32+esm10
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  vim                             2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-athena                      2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-common                      2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-gnome                       2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-gtk                         2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-gtk3                        2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-gui-common                  2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-nox                         2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-runtime                     2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  vim-tiny                        2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro
  xxd                             2:8.0.1453-1ubuntu1.13+esm22
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  vim                             2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-athena                      2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-athena-py2                  2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-common                      2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-gnome                       2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-gnome-py2                   2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-gtk                         2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-gtk-py2                     2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-gtk3                        2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-gtk3-py2                    2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-gui-common                  2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-nox                         2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-nox-py2                     2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-runtime                     2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro
  vim-tiny                        2:7.4.1689-3ubuntu1.5+esm37
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  vim                             2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-athena                      2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-common                      2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-gnome                       2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-gtk                         2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-gui-common                  2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-lesstif                     2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-nox                         2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-runtime                     2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro
  vim-tiny                        2:7.4.052-1ubuntu3.1+esm31
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8541-1

CVE-2026-59856, CVE-2026-59857, CVE-2026-59858

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8541-1

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu important arbitrary commands vim

Package Information

https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.7
https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.18
https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.34

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.