Package: vim (9.2.1014-r0)

Verbesserter Texteditor im vi-Stil

Other Packages Related to vim:

  • dep: [vim-common] (= 9.2.1014-r0)

    Verbesserter Texteditor im vi-Stil (gemeinsame Dateien)

  • dep: [xxd] (= 9.2.1014-r0)

    Werkzeug zum Erstellen (oder Rückgängigmachen) eines Hex-Dumps

  • dep: so:libc.musl-aarch64.so.1

    Package not available

  • dep: so:libncursesw.so.6

    Package not available

Download vim

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch641.7 MiB3.4 MiBlist of filesNot published
x86_641.7 MiB3.3 MiBlist of filesNot published

Paketdateiabdeckung (nicht beobachtet)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.23 main aarch64

Dieses Paket verwenden

OpenFactory kann dieses Betriebssystem in einer Browser-VM starten oder einen Image-Build mit dem nativen Paketnamen aus diesem Datensatz beginnen.

Versionen, Suiten und Repositories

Jede Zeile ist Paketindex-Metadaten für eine Version, Architektur, Suite und ein Repository. Namen, URLs und Größen stammen aus der Quelle; ein Link ist ein veränderbarer Abrufort, kein Weitergabanspruch von OpenFactory.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
9.2.1014-r0v3.23 / mainaarch64Alpine Linux 3.23 · main · aarch641.7 MiB3.4 MiBNot reported
9.2.1014-r0v3.23 / mainx86_64Alpine Linux 3.23 · main · x86_641.7 MiB3.3 MiBNot reported

Field source: Alpine Linux 3.23 main aarch64

Bekannte Sicherheitslücken

Die Paketzuordnung läuft.

CVESchweregradBetroffene Versionen
[CVE-2026-73071]

Published:

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json_decode_item() in src/json.c can retain a stale pointer after json_decode_string() invokes channel_fill() to refill a

High(8.6)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-73072]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting values left by set_sal_first(), so a crafted spell file contai

High(8.6)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-73076]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker

High(8.6)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-73070]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserver_accept(), causing descriptors t

Medium(6.8)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-73074]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0841, prop_add_one() in src/textprop.c uses the proplen value from get_text_props() to increment a uint16_t property count beyond 0xffff,

High(8.6)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-73075]

Published:

Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popup_mark_opacity_zindex() in src/popupwin.c can use a negative w_winrow for a text-property-anchored popup with clipwin

Medium(4.6)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-73077]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftplugin/ps1.vim filetype plugins pass attacker-controlled Visual

High(8.6)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-73078]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vim constructs Bookmarks, History, and Tar

High(8.8)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-59856]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion script in runtime/autoload/phpcomplete.vim interpolates a class or trait name, taken from the contents of th

High(8.4)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-59858]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion script in runtime/autoload/ccomplete.vim interpolates the typeref: or typename: extension field of a tags entr

High(8.4)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-57454]

Published:

Vim is an open source, command line text editor. From 9.2.0320 until 9.2.0679, a crafted undo or swap file can store a virtual-text property whose offset and length point outside the line's property d

Medium(6.8)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-57456]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0699, Vim's Python omni-completion (runtime/autoload/python3complete.vim and the legacy pythoncomplete.vim) executes reconstructed functio

High(8.4)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-59857]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spell_soundfold_sal() in src/spell.c translates a word through a spell file's SAL sound-folding rules into

Medium(5.6)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-57453]

Published:

Vim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries

Medium(6.5)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-57455]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0698, the single-byte branch of spell_soundfold_sofo() in src/spell.c translates a word through a spell file's SOFO (sound-folding) byte m

Medium(5.5)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-57452]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0671, when Vim opens a file encrypted with the VimCrypt~04! or VimCrypt~05! method (xchacha20poly1305, requires the +sodium feature) whose

Medium(5.5)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-57451]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0670, get_text_props() in src/textprop.c reads a uint16 property count stored inline after a line's text and returns it as the number of 3

Medium(5.5)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-55892]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0662, the dump_prefixes() function in src/spell.c walks a spell-file prefix trie iteratively with a depth counter while dumping the prefix

Medium(5.5)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-55895]

Published:

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/ne

High(7.8)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0854-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[CVE-2026-52860]

Published:

Vim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec() as pa

High(8)Unbekannt
Details (2)
  • 9.2.1014-r0 · aarch64 · v3.23

    Unbekannt · Behoben: 9.2.0602-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

  • 9.2.1014-r0 · x86_64 · v3.23

    Unbekannt · Behoben: 9.2.0602-r0

    Version impact unknown

    pypi · vim · alpine · 3.23

[Weitere Ergebnisse]

Zuletzt synchronisiert:

[CVE-Katalog]

Prüfsummen

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

9.2.1014-r0 / aarch64Beobachtet Sep 1, 2026apk-checksum Q18avRkZGFal…ZW94Ah8=Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (apk-checksum): Q18avRkZGFal5qcuFDFUqPZW94Ah8=

Field source: Alpine Linux 3.23 main aarch64

9.2.1014-r0 / x86_64Beobachtet Sep 1, 2026apk-checksum Q1PwpBRl+8I+…Q4rMv3Q=Prüfsumme der Quelle

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Prüfsumme der Quelle (apk-checksum): Q1PwpBRl+8I+dnldB42wgGQ4rMv3Q=

Field source: Alpine Linux 3.23 main x86_64

Quellen

  • Authoritative source; repository metadata signature verified

    Signaturnachweis

    v3-23-main-aarch64:3c193cdb4a3ae8c5a08d7ef5282971be76249c13d1db367323e06212ec30d230

    Repository-signature verification record
    Signed-object SHA-256
    f399e7803b7b52f81a6307739a8951c6edcdbf54e825d0d34c309a2cd305569d
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Authoritative source; repository metadata signature verified

    Signaturnachweis

    v3-23-main-x86-64:aecb4d45d58b2e08e09c841a9132ab6f77239d8117232bea8385b33090e25fbb

    Repository-signature verification record
    Signed-object SHA-256
    eae8fa0146127c33cd9a723915001f535277687349397f0d34f313638e33fc18
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026