Bug 34035 - vim new security issue CVE-2025-26603
Summary: vim new security issue CVE-2025-26603
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2025-02-24 10:10 CET by Nicolas Salguero
Modified: 2025-03-12 11:20 CET (History)
3 users (show)

See Also:
Source RPM: vim-9.1.1043-1.mga9.src.rpm
CVE: CVE-2025-26603
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Nicolas Salguero 2025-02-24 10:11:38 CET

Status comment: (none) => Fixed upstream in 9.1.1115
CVE: (none) => CVE-2025-26603
Source RPM: (none) => vim-9.1.1043-1.mga9.src.rpm

Comment 1 Nicolas Salguero 2025-02-24 11:24:31 CET 
Suggested advisory:
========================

The updated packages fix a security vulnerability:

A heap use-after-free was found in str_to_reg() in Vim < 9.1.1115. (CVE-2025-26603)

References:
https://openwall.com/lists/oss-security/2025/02/16/1
https://github.com/vim/vim/security/advisories/GHSA-63p5-mwg2-787v
========================

Updated packages in core/updates_testing:
========================
vim-X11-9.1.1122-1.mga9
vim-common-9.1.1122-1.mga9
vim-enhanced-9.1.1122-1.mga9
vim-minimal-9.1.1122-1.mga9

from SRPM:
vim-9.1.1122-1.mga9.src.rpm

Status comment: Fixed upstream in 9.1.1115 => (none)
Assignee: bugsquad => qa-bugs
Status: NEW => ASSIGNED

katnatek 2025-02-24 19:34:02 CET

Keywords: (none) => advisory

Comment 2 katnatek 2025-02-25 04:26:19 CET 
RH x86_64

vim -u NONE -i NONE -n -m -X -Z -e -s -S CVE-2025-26603-POC -c :qa!

Do nothing

installing vim-X11-9.1.1122-1.mga9.x86_64.rpm vim-common-9.1.1122-1.mga9.x86_64.rpm vim-minimal-9.1.1122-1.mga9.x86_64.rpm vim-enhanced-9.1.1122-1.mga9.x86_64.rpm from //home/katnatek/qa-testing/x86_64
Preparing...                     ##################################################################################################
      1/4: vim-common            ##################################################################################################
      2/4: vim-X11               ##################################################################################################
      3/4: vim-enhanced          ##################################################################################################
      4/4: vim-minimal           ##################################################################################################
      1/4: removing vim-enhanced-9.1.1043-1.mga9.x86_64
                                 ##################################################################################################
      2/4: removing vim-X11-9.1.1043-1.mga9.x86_64
                                 ##################################################################################################
      3/4: removing vim-common-9.1.1043-1.mga9.x86_64
                                 ##################################################################################################
      4/4: removing vim-minimal-9.1.1043-1.mga9.x86_64
                                 ##################################################################################################

vim -u NONE -i NONE -n -m -X -Z -e -s -S CVE-2025-26603-POC -c :qa!
Do nothing

vim works OK
Comment 3 Herman Viaene 2025-02-25 14:22:47 CET 
MGA9-64 Plasma Wayland on Compaq H000SB
No installation issues.
Used vim on a .txt file, applied commands dd, a, i and x. All worked OK.

Whiteboard: (none) => MGA9-64-OK
CC: (none) => herman.viaene

Comment 4 Thomas Andrews 2025-02-25 15:59:20 CET 
Validating.

Keywords: (none) => validated_update
CC: (none) => andrewsfarm, sysadmin-bugs

Comment 5 Mageia Robot 2025-02-25 17:59:15 CET 
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2025-0074.html

Status: ASSIGNED => RESOLVED
Resolution: (none) => FIXED

Comment 6 urielv alerie 2025-03-12 11:08:19 CET Comment hidden (spam)

CC: (none) => urielvalerie08

Nicolas Salguero 2025-03-12 11:20:18 CET

CC: urielvalerie08 => (none)
Note You need to log in before you can comment on or make changes to this bug.